- Split GH_TOKEN away from binary smoke-test step to prevent token exfiltration via compromised release artifact - Wrap gh subprocess calls in try/except FileNotFoundError so the guard degrades gracefully when gh CLI is not installed - Remove stderr suppression from cargo check --locked so diagnostics are visible on failure |
||
|---|---|---|
| .. | ||
| cut_release_tag.sh | ||