Handle vaccine CI trigger id

This narrows down the triggered workflow run to the exact one created by the GitLab CI pipeline. A number of corner cases were improperly handled, and there was an opportunity for a secret leak, which led to a full script rewrite.
DataDog · Feb 18, 2025 · ced5f08 · ced5f08
1 parent 31c757b
commit ced5f08
Show file tree

Hide file tree

Showing 2 changed files with 322 additions and 77 deletions.
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
@@ -180,4 +180,4 @@ vaccine:
   stage: vaccine
   needs: [create-multiarch-lib-injection-image]
   script: |
-    .gitlab/scripts/vaccine.sh lloeki/ssi "${CI_COMMIT_SHA}"
+    .gitlab/scripts/vaccine.sh lloeki/ssi "${CI_COMMIT_SHA}" "glci:${CI_PIPELINE_ID}"