hackclub/burrow
1
0
Fork 0
Code Pull requests Releases Packages Activity Actions

Stabilize forgejo namespace auth and secrets
Some checks failed
Build Apple / Build App (iOS Simulator) (push) Has been cancelled
Details
Build Rust / Cargo Test (push) Failing after 9s
Details
Build Site / Next.js Build (push) Failing after 8s
Details
Build Apple / Build App (macOS) (push) Has been cancelled
Details

Browse source
This commit is contained in:
Conrad Kramer 2026-03-19 04:08:10 -07:00
parent 5c0a9b3f54
commit 5b09f3a742
8 changed files with 59 additions and 49 deletions
Download patch file Download diff file Expand all files Collapse all files

4
services/forgejo-nsc/internal/nsc/dispatcher.go
View file

@ -197,6 +197,10 @@ func (d *Dispatcher) LaunchRunner(ctx context.Context, req LaunchRequest) (strin
args = append(args, "--", "/bin/sh", "-c", script)
cmd := exec.CommandContext(ctx, d.opts.BinaryPath, args...)
// The Linux `nsc run` path uses the CLI auth flow. Keep using the service
// account's refreshed Namespace login session instead of forcing the
// short-lived NSC_TOKEN_FILE bearer token into CLI requests.
cmd.Env = nscCLIEnv()
var buf bytes.Buffer
cmd.Stdout = &buf
cmd.Stderr = &buf