Skip to content

Commit d4998a8

Browse files
ci(audience): write Unity activation log to /tmp so it stays out of CI artifacts (SDK-317)
- The Linux PlayMode container script teed Unity license activation output to /github/workspace/artifacts/activation.log, and the workflow uploads everything under that directory as a downloadable artifact. - Unity's activation log can include sensitive account or entitlement details, so anyone with read access to the workflow run could pull them out of the artifact zip. - Moves ACTIVATION_LOG to /tmp/audience-unity-activation.log. The two grep checks that gate success / failure still read the same file, just from /tmp, and the file never reaches the artifact upload. Linear: SDK-317 Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
1 parent 6197ebf commit d4998a8

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

.github/scripts/audience/playmode-linux-container.sh

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
set -uo pipefail
77

88
LOG=/github/workspace/artifacts/unity.log
9-
ACTIVATION_LOG=/github/workspace/artifacts/activation.log
9+
ACTIVATION_LOG=/tmp/audience-unity-activation.log
1010
RESULTS=/github/workspace/artifacts/test-results.xml
1111
PROJECT=/github/workspace/examples/audience
1212

0 commit comments

Comments
 (0)