From f7cfd472592bd08c7053333e4b0cfdfbd814afe9 Mon Sep 17 00:00:00 2001 From: Ion Alpha Date: Wed, 8 Jul 2026 07:02:47 +0000 Subject: [PATCH] ci: remove the Docker Hub description sync workflow Docker Hub gates repository description edits behind an account-password session token; a Read/Write personal access token is scoped to image pull/push only and gets 403 on the description endpoint. Rather than store the account password in CI for a public repository, drop the workflow. The Docker Hub repository overview is maintained manually from the README. --- .github/workflows/dockerhub-description.yml | 32 --------------------- 1 file changed, 32 deletions(-) delete mode 100644 .github/workflows/dockerhub-description.yml diff --git a/.github/workflows/dockerhub-description.yml b/.github/workflows/dockerhub-description.yml deleted file mode 100644 index 2ff1c8d5..00000000 --- a/.github/workflows/dockerhub-description.yml +++ /dev/null @@ -1,32 +0,0 @@ -name: Docker Hub description - -# Keep the Docker Hub repository overview and short description in step with the -# README. GoReleaser pushes image bytes on a tag but never touches these text -# fields, so this syncs them whenever the README changes on main (and on demand). -on: - push: - branches: [main] - paths: - - README.md - - .github/workflows/dockerhub-description.yml - workflow_dispatch: - -permissions: - contents: read - -jobs: - sync: - name: Sync README to Docker Hub - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - - uses: peter-evans/dockerhub-description@1b9a80c056b620d92cedb9d9b5a223409c68ddfa # v5.0.0 - with: - username: ${{ secrets.DOCKERHUB_USERNAME }} - password: ${{ secrets.DOCKERHUB_TOKEN }} - repository: ionalpha/flynn - short-description: "A secure, sandboxed, verifiable self-hosted agent operating system in a single Go binary." - readme-filepath: ./README.md - # Rewrite the README's repo-relative links to absolute github.com URLs so - # they resolve on Docker Hub, which has no notion of the repository tree. - enable-url-completion: true