Skip to content

fix(rag): remove frontend token build arg - #71

Merged
man4ish merged 1 commit into
mainfrom
fix/remove-rag-token-build-arg
Aug 30, 2026
Merged

fix(rag): remove frontend token build arg#71
man4ish merged 1 commit into
mainfrom
fix/remove-rag-token-build-arg

Conversation

@man4ish

@man4ish man4ish commented Aug 30, 2026

Copy link
Copy Markdown
Collaborator

Summary

The RAG Dockerfile now uses the BuildKit github_token secret for both private npm and Python package installation. Remove the obsolete frontend GITHUB_TOKEN build arg from Compose so no credential is passed as a Docker ARG.

The service-level BuildKit secret declaration remains.

Verification

  • Full no-cache docker compose build rag: passed with the paired RAG Dockerfile change
  • Captured build log credential-pattern scan: no ghp_ or github_pat_ token-shaped value found
  • docker compose config --quiet: passed

No force-push or history rewrite.

@man4ish
man4ish merged commit 245b7cd into main Aug 30, 2026
6 of 7 checks passed
man4ish added a commit that referenced this pull request Aug 31, 2026
Correct stale Admin Console claims against current merged
omnibioai-control-center main (PRs #65-#71):

- Admin Console is live-tested at admin.omnibioai.org (authenticated
  E2E 8/8), not deployment-dependent.
- Security Audit Explorer is merged and live-certified for its
  exercised paths (deep link, hard refresh, sidebar, history,
  filters/details, safe metadata, read-only) -- no longer 'not yet a
  completed UI'.
- Document /workflows as the committed deep-link route; /workflow-operations
  is explicitly not a separate committed route.
- Preserve the Audit Logs vs. Audit Explorer distinction (Auth identity
  ledger vs. Security Audit's safe durable audit-event contract).
- Add a high-level Admin Console -> Control Center -> Security Audit
  safe API -> durable audit_events architecture diagram, linking to
  the authoritative Control Center Admin Console guide instead of
  duplicating it.
- Add a concise SAT-1..SAT-4 status summary without claiming
  ecosystem-wide completeness.
- Keep the existing Integration Health / WORKBENCH_PLUGIN_REGISTRY_PATH
  documentation (accurate, from the prior unpushed commit) and clarify
  the inventory is derived dynamically, not hard-coded.

README.md only; no product/config changes.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01W1o9a9tktwmpSjnYraVGNo
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant