fadhli
8141787342
Gitea secrets and the .env loader both treat the value literally; the single quotes were misleading and risked being copied verbatim into the stored secret. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
17 lines
557 B
Bash
17 lines
557 B
Bash
# Copy this file to .env and fill in the values.
|
|
# .env is gitignored — never commit real credentials.
|
|
|
|
# ── Container engine (docker | podman) ──
|
|
CONTAINER_ENGINE=docker
|
|
|
|
# ── Docker Registry ──
|
|
REGISTRY=kcr.kollect.biz
|
|
REGISTRY_USER=robot$kollect-tools+ci-builder
|
|
REGISTRY_PASS=harbor-robot-password
|
|
IMAGE_TAG=latest
|
|
|
|
# ── OWASP Dependency-Check ──
|
|
# Get an API key at https://nvd.nist.gov/developers/request-an-api-key
|
|
# Optional but strongly recommended — without it NVD rate-limits to 5 req / 30s.
|
|
NVD_API_KEY=<nvd-api-key>
|