diff --git a/.github/workflows/ci-vercel-website-preview.yaml b/.github/workflows/ci-vercel-website-preview.yaml index bc180c593d..3588cfc2bf 100644 --- a/.github/workflows/ci-vercel-website-preview.yaml +++ b/.github/workflows/ci-vercel-website-preview.yaml @@ -7,14 +7,12 @@ on: paths: - 'apps/website/**' - 'packages/design-system/**' - - 'packages/object-info-parser/**' - 'packages/tailwind-utils/**' push: branches: [main] paths: - 'apps/website/**' - 'packages/design-system/**' - - 'packages/object-info-parser/**' - 'packages/tailwind-utils/**' env: @@ -57,7 +55,6 @@ jobs: env: WEBSITE_ASHBY_API_KEY: ${{ secrets.WEBSITE_ASHBY_API_KEY }} WEBSITE_ASHBY_JOB_BOARD_NAME: ${{ secrets.WEBSITE_ASHBY_JOB_BOARD_NAME }} - WEBSITE_CLOUD_API_KEY: ${{ secrets.WEBSITE_CLOUD_API_KEY }} run: vercel build - name: Fetch head commit metadata @@ -155,7 +152,6 @@ jobs: env: WEBSITE_ASHBY_API_KEY: ${{ secrets.WEBSITE_ASHBY_API_KEY }} WEBSITE_ASHBY_JOB_BOARD_NAME: ${{ secrets.WEBSITE_ASHBY_JOB_BOARD_NAME }} - WEBSITE_CLOUD_API_KEY: ${{ secrets.WEBSITE_CLOUD_API_KEY }} run: vercel build --prod - name: Deploy project artifacts to Vercel diff --git a/.github/workflows/ci-website-build.yaml b/.github/workflows/ci-website-build.yaml index 92da74fde1..211ee86960 100644 --- a/.github/workflows/ci-website-build.yaml +++ b/.github/workflows/ci-website-build.yaml @@ -39,23 +39,4 @@ jobs: env: WEBSITE_ASHBY_API_KEY: ${{ secrets.WEBSITE_ASHBY_API_KEY }} WEBSITE_ASHBY_JOB_BOARD_NAME: ${{ secrets.WEBSITE_ASHBY_JOB_BOARD_NAME }} - WEBSITE_CLOUD_API_KEY: ${{ secrets.WEBSITE_CLOUD_API_KEY }} run: pnpm --filter @comfyorg/website build - - - name: Verify cloud API key is not leaked into build output - env: - WEBSITE_CLOUD_API_KEY: ${{ secrets.WEBSITE_CLOUD_API_KEY }} - run: | - set +x - if [ -z "${WEBSITE_CLOUD_API_KEY:-}" ]; then - echo "Secret not available in this run; skipping leak check." - exit 0 - fi - # grep -rlF prints only file paths (never match content). - MATCHES=$(grep -rlF --exclude-dir=node_modules --null \ - -e "$WEBSITE_CLOUD_API_KEY" apps/website/dist/ 2>/dev/null \ - | tr '\0' '\n' || true) - if [ -n "$MATCHES" ]; then - echo "::error title=Cloud API key leaked into build output::$MATCHES" - exit 1 - fi