fix(security): remediate workflow vulnerability in .github/workflows/nightly.yml

2026-05-11 14:49:43 +00:00 · 2026-03-05 12:23:12 +00:00
1 changed files with 4 additions and 4 deletions
@@ -133,7 +133,7 @@ jobs:
    steps:
      - name: Login to Hugging Face
        run: |
-          hf auth login --token "$HF_USER_TOKEN" --add-to-git-credential
+          echo "$HF_USER_TOKEN" | hf auth login --token --add-to-git-credential
          hf auth whoami
      - name: Run pytest on CPU
        run: pytest tests -vv --maxfail=10
@@ -165,7 +165,7 @@ jobs:
    steps:
      - name: Login to Hugging Face
        run: |
-          hf auth login --token "$HF_USER_TOKEN" --add-to-git-credential
+          echo "$HF_USER_TOKEN" | hf auth login --token --add-to-git-credential
          hf auth whoami
      - name: Run pytest on GPU
        run: pytest tests -vv --maxfail=10
@@ -198,7 +198,7 @@ jobs:
    steps:
      - name: Login to Hugging Face
        run: |
-          hf auth login --token "$HF_USER_TOKEN" --add-to-git-credential
+          echo "$HF_USER_TOKEN" | hf auth login --token --add-to-git-credential
          hf auth whoami
      - name: Verify GPU availability
        run: |
@@ -207,4 +207,4 @@ jobs:

      - name: Run multi-GPU training tests
      # TODO(Steven): Investigate why motors tests are failing in multi-GPU setup
-        run: pytest tests -vv --maxfail=10 --ignore=tests/motors/
+        run: pytest tests -vv --maxfail=10 --ignore=tests/motors/