From bbe8216eb4d9263f79be611194b953923428970c Mon Sep 17 00:00:00 2001 From: Pablo Ovelleiro Corral Date: Mon, 21 Aug 2023 11:58:50 +0200 Subject: [PATCH] Document netrc being passed to ext. config service --- docs/docs/30-administration/100-external-configuration-api.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/docs/30-administration/100-external-configuration-api.md b/docs/docs/30-administration/100-external-configuration-api.md index 8f703b271a..7970ff46e5 100644 --- a/docs/docs/30-administration/100-external-configuration-api.md +++ b/docs/docs/30-administration/100-external-configuration-api.md @@ -7,6 +7,10 @@ Every request sent by Woodpecker is signed using a [http-signature](https://data A simplistic example configuration service can be found here: [https://github.com/woodpecker-ci/example-config-service](https://github.com/woodpecker-ci/example-config-service) +:::warning +You need to trust the external config service as it is getting secret information about the repository and pipeline and has the ability to change pipeline configs that could run malicious tasks. +::: + ## Config ```shell