mirror of
https://github.com/logos-storage/logos-storage-nim.git
synced 2026-07-15 05:39:27 +00:00
4f816d5001
GitHub's secret masking is value-based, not reference-based: any string equal to a registered secret's value gets scrubbed from logs and refused as a step/job output. Because secrets: inherit registers every secret with the reusable workflow, storing the public DockerHub namespace as a secret poisons every output containing it. This means the `logos_storage_image` output was masked because its value (logosstorage/...) contains the DOCKERHUB_USERNAME secret value (logosstorage, the public org name). With secrets: inherit, that secret is registered for masking and GitHub skipped the output entirely. So commit #1463's intent ("feed the test job from the build output instead of re-guessing the tag") was silently defeated — the tests only passed because the k8s manifest falls back to a hardcoded `latest-dist-tests` tag.