VC_noSugar/xc_agent_platform_demo
1
0
Fork 0
forked from luopingyi/xc_agent_platform_demo
Code Pull Requests Activity

live Tag: embed EXTERNAL_SERVICE_TOKEN for console (no env editor); docs warning; kill switch unchanged (59 tests)

Browse Source
This commit is contained in:
Victor Cao
2026-10-17 07:30:02 +08:00
parent 49d59b6bd4
commit 0e47086e85
5 changed files with 22 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
docs/token-bake-warning.md Normal file
View File

@@ -0,0 +1,5 @@
# Token bake warning
Tag `v0.2.3-live-token` embeds a personal Xc-Token as `EXTERNAL_SERVICE_TOKEN` in the image layers and, once committed, git history. This is a security risk.
Set `ALLOW_LIVE_SUBMIT=0` to stop live submissions. Rotate the token if the repository or image is exposed.