Skip to content

Fix ui:update_screenshots job

Mark Florianrequested to merge
fix-update-screenshots-job into main

Fix ui:update_screenshots job

Previously, the push was failing because the GITLAB_TOKEN CI variable is protected, so it's not available in unprotected branches/tags, i.e., merge request pipelines.

The old GitLab UI project did not protect that variable, which is why it worked there. That's not great, as that token has full api scope, and so doesn't follow the principle of least privilege.

Here, we are using a new project access token, with scope limited to write_repository, and is not a protected CI/CD variable.

Addresses #2034 (comment 2541231246).

See https://gitlab.com/gitlab-org/gitlab-services/design.gitlab.com/-/jobs/10241494640 for a success run of the job with this fix.

Edited by Mark Florian

Merge request reports