Skip to content

Commit cc09828

Browse files
committed
Avoid to expose credentials and renew them
1 parent 1041bc9 commit cc09828

File tree

5 files changed

+10
-7
lines changed

5 files changed

+10
-7
lines changed

.gitignore

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
secrets_2.7.tar

.travis.yml

Lines changed: 9 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -18,18 +18,19 @@ env:
1818
before_install:
1919
- export TZ=Asia/Tokyo
2020
- git checkout ${DOCS_BRANCH}
21-
- openssl aes-256-cbc -K $encrypted_9796e8faf501_key -iv $encrypted_9796e8faf501_iv -in secrets.tar.enc -out secrets.tar -d
2221
- cd ..
2322
- pwd
2423
- ls -la
2524
- BASEDIR="$(pwd)"
2625
- cd ~
27-
- tar xvf "${BASEDIR}"/python-docs-ja/secrets.tar
28-
- chmod 600 ~/.ssh/python-docs-ja
29-
- chmod 600 ~/.ssh/cpython-doc-catalog
26+
- openssl aes-256-cbc -K $encrypted_9796e8faf501_key -iv $encrypted_9796e8faf501_iv -in "${BASEDIR}/python-docs-ja/secrets_${DOCS_BRANCH}.tar.enc" -out ~/secrets_{DOCS_BRANCH}.tar -d
27+
- tar xvf ~/secrets_{DOCS_BRANCH}.tar
28+
- rm ~/secrets_{DOCS_BRANCH}.tar
29+
- chmod 600 ~/.ssh/python-docs-ja_${DOCS_BRANCH}
30+
- chmod 600 ~/.ssh/cpython-doc-catalog_${CATALOG_BRANCH}
3031
# Hack from: https://gist.github.com/jamesmcfadden/d379e04e7ae2861414886af189ec59e5
31-
- echo -e "Host python-docs-ja.github.com\n\tHostName github.com\n\tIdentityFile ~/.ssh/python-docs-ja\n\tStrictHostKeyChecking no\n" >> ~/.ssh/config
32-
- echo -e "Host cpython-doc-catalog.github.com\n\tHostName github.com\n\tIdentityFile ~/.ssh/cpython-doc-catalog\n\tStrictHostKeyChecking no\n" >> ~/.ssh/config
32+
- echo -e "Host python-docs-ja.github.com\n\tHostName github.com\n\tIdentityFile ~/.ssh/python-docs-ja_${DOCS_BRANCH}\n\tStrictHostKeyChecking no\n" >> ~/.ssh/config
33+
- echo -e "Host cpython-doc-catalog.github.com\n\tHostName github.com\n\tIdentityFile ~/.ssh/cpython-doc-catalog_${CATALOG_BRANCH}\n\tStrictHostKeyChecking no\n" >> ~/.ssh/config
3334
- cat ~/.ssh/config
3435
- git config --global user.email "travisci-build-bot@example.com"
3536
- git config --global user.name "Autobuild bot on TravisCI"
@@ -48,7 +49,8 @@ script:
4849
- cd "${BASEDIR}"/cpython-doc-catalog/Doc/locales
4950
- tx pull --force --language ja
5051
- cd ja/LC_MESSAGES
51-
- git add .
52+
- git add *.po **/*.po
53+
- git status
5254
- if [ $(git status --short | wc -l) -eq 0 ]; then echo "no .po file to upload"; else echo "I have .po file(s) to upload"; git commit --message="[skip ci] Update .po files"; git push --quiet "git@python-docs-ja.github.com:python/python-docs-ja.git" ${DOCS_BRANCH}:${DOCS_BRANCH}; fi
5355
- rm -rf "${BASEDIR}"/cpython-doc-catalog/Doc/locales/ja
5456
# renew-catalog-template

secrets.tar

-7 KB
Binary file not shown.

secrets.tar.enc

-7.02 KB
Binary file not shown.

secrets_2.7.tar.enc

7.02 KB
Binary file not shown.

0 commit comments

Comments
 (0)