fix: allow rootless readonly on build secret (#437)

SocialGouv · Nov 7, 2023 · 887e2af · 887e2af
1 parent 1e7551c
commit 887e2af
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/plugins/contrib/jobs/build/use.yaml b/plugins/contrib/jobs/build/use.yaml
@@ -86,7 +86,7 @@ runs:
         {{ end -}}
         {{ if $.with.secrets -}}
         {{- range $id, $val := $.with.secrets -}}
-        --secret id={{ or $val.id $id }},env=SECRET_{{ $id | upper }} \
+        --secret id={{ or $val.id $id }},mode=0444,env=SECRET_{{ $id | upper }} \
         {{ end -}}
         {{ end -}}
         {{ if $.with.target -}}