|
|
@@ -135,7 +135,7 @@ Release checklist:
|
|
|
## 8. Gogs credentials
|
|
|
|
|
|
- Never commit, print, or paste the Gogs token into chat, commit messages, logs, release bodies, or shell history. It is not part of the repository.
|
|
|
-- Read it from the `GOGS_TOKEN` environment variable, or from `$HOME/.config/cardash/gogs_token` (mode `600`). The token belongs to `kkazakov`.
|
|
|
+- Read it from the `GOGS_TOKEN` environment variable, else `$HOME/.config/cardash/gogs_token`, else `android/keystore/gogs_token` (all mode `600`; the repo-local file is gitignored). The token belongs to `kkazakov`.
|
|
|
- Authenticate API calls with `Authorization: token $GOGS_TOKEN`. The token can list releases and read repository data.
|
|
|
- This Gogs build exposes only `GET /repos/:owner/:repo/releases`; `POST /api/v1/repos/.../releases` returns an HTML 404. Create and publish releases in the web UI at `/releases/new`; do not block a release, or claim it is published, just because the API cannot create one.
|
|
|
- Use the token only for API operations this Gogs version actually supports.
|
