Do not set DEFAULT_GITHUB_TOKEN if cargo-binstall fallback is disabled

This commit is contained in:
Taiki Endo
2026-04-10 02:37:36 +09:00
parent 8f20d38f44
commit 77557fa399
3 changed files with 6 additions and 2 deletions

View File

@@ -124,6 +124,8 @@ When installing with `tool: <tool_name>` or `tool: <tool_name>@<omitted_version>
See the linked documentation for information on security when installed using [snap](https://snapcraft.io/docs) or [cargo-binstall](https://github.com/cargo-bins/cargo-binstall#faq).
The default fallback (cargo-binstall) is often affected by GitHub's API rate limits, so we pass the `${{ github.token }}` to cargo-binstall. Disabling the cargo-binstall fallback prevent passing token so helps enhance security.
See the [Supported tools section](#supported-tools) for how to ensure that fallback is not used.
## Compatibility