(grails-gradle-publish) branch main updated: ci(release): read password securely in release scripts (#14)

[matrei]

This is an automated email from the ASF dual-hosted git repository.

matrei pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/grails-gradle-publish.git


The following commit(s) were added to refs/heads/main by this push:
     new 3f01b4b  ci(release): read password securely in release scripts (#14)
3f01b4b is described below

commit 3f01b4b8de636df50ba52ccf6a2349932ae111f4
Author: Mattias Reichel <mat...@apache.org>
AuthorDate: Tue Oct 14 08:06:58 2025 +0200

    ci(release): read password securely in release scripts (#14)
    
    Prompt for the password without echo to avoid leaking it in the terminal or 
logs.
---
 .github/scripts/releaseDistributions.sh | 8 +++++---
 .github/scripts/releaseJarFiles.sh      | 7 ++++---
 2 files changed, 9 insertions(+), 6 deletions(-)

diff --git a/.github/scripts/releaseDistributions.sh 
b/.github/scripts/releaseDistributions.sh
index 2718bd3..a05a29d 100755
--- a/.github/scripts/releaseDistributions.sh
+++ b/.github/scripts/releaseDistributions.sh
@@ -23,18 +23,20 @@
 
 set -euo pipefail
 
-if [[ $# -ne 3 ]]; then
-  echo "Usage: $0 <tag> <username> <password>" >&2
+if [[ $# -ne 2 ]]; then
+  echo "Usage: $0 <tag> <username>" >&2
   exit 1
 fi
 
 RELEASE_TAG="$1"
 RELEASE_VERSION="${RELEASE_TAG#v}"
 SVN_USER="$2"
-SVN_PASS="$3"
 RELEASE_ROOT="https://dist.apache.org/repos/dist/release/grails/grails-publish";
 DEV_ROOT="https://dist.apache.org/repos/dist/dev/grails/grails-publish";
 
+read -r -s -p "Password: " SVN_PASS
+echo
+
 if [[ -z "${RELEASE_TAG}" ]]; then
   echo "❌ ERROR: Release Tag must not be empty." >&2
   exit 1
diff --git a/.github/scripts/releaseJarFiles.sh 
b/.github/scripts/releaseJarFiles.sh
index 8421782..b0a4874 100755
--- a/.github/scripts/releaseJarFiles.sh
+++ b/.github/scripts/releaseJarFiles.sh
@@ -23,15 +23,16 @@
 
 set -euo pipefail
 
-if [[ $# -ne 3 ]]; then
-  echo "Usage: $0 <staging repo description> <username> <password>" >&2
+if [[ $# -ne 2 ]]; then
+  echo "Usage: $0 <staging repo description> <username>" >&2
   exit 1
 fi
 
 NEXUS_URL="https://repository.apache.org";
 STAGING_DESCRIPTION="$1"
 NEXUS_USER="$2"
-NEXUS_PASS="$3"
+read -r -s -p "Password: " NEXUS_PASS
+echo
 
 if [[ -z "${STAGING_DESCRIPTION}" ]]; then
   echo "ERROR: Staging Description must not be empty." >&2