gitlab-ci-lint hook no longer working since GitLab CI lint API requires authentication
Since GitLab v13.12.2 release, this security fix has been introduced:
Now the CI lint API requires authentication. This is not yet documented into the lint API
Issue on gitlab-ci-lint
repository
To circumvent this issue, I see three solution now.
- We could set-up a token access to read and write on the API via an option or via an environment variable:
- We could store this token into
.pre-commit-config.yml
: anyone could access in read/write DuniterPy API - Use an environment variable that we would share among trusts contributors. Tested, it's working. Would prevent new contributor to do new commits with this check which would fail.
- We could store this token into
- Delete this hook. We would loose this useful check.
There might be a solution in between. We could disable this check in the meantime to find a middle solution to this issue.
@vtexier, any opinion on that?
Edited by Moul