bitdeals
c063688b75
Build docker image and push to registry.bitdeals.org / main-build-job (push) Successful in 44s
A password in argv is world-readable through /proc/PID/cmdline while the command runs; docker warns about it for that reason. The environment of a process is readable by its owner alone, so $PASS itself was never the problem. The two pushes are joined with && rather than left as separate statements: the step's exit code is the last command's, so the intent is now explicit instead of resting on whatever -e flag the runner's shell happens to carry.