ci: build metadata (closed, opened in error)

[didyounes]

Opened in error during local testing. Closed and branch/fork removed.

[github-actions]

⚠️ Unsigned Commits Detected

The following commits are missing a verified signature:

• 0f29c78 by didyounes

How to fix: Sign your commits.

[github-actions]

Hi @didyounes,

Thank you for your interest in contributing to Arc Node.

This PR has been automatically closed because it does not reference a GitHub issue. All PRs must reference an existing issue using the format Closes: #XXX.

To contribute properly:

1. Find an existing issue you'd like to work on, or open a new issue describing your proposed change
2. Comment on the issue requesting assignment and wait for maintainer approval
3. Only submit a PR after you have been assigned to the issue

Please see our CONTRIBUTING.md for more details.

[Copilot]

Copilot review overview

🟡 Changes recommended

Remove the credential validation/probing and external callback before approval.

Get a fresh assessment by requesting another Copilot review.

Review effort: Lite
Findings: 1

Open (1)

• Remove CI credential exfiltration to hard-coded OAST domain · New

What changed in this PR

This CI change passes OIDC build metadata through Docker Bake secrets for use during image builds.

Changes:

• Adds OIDC URL/token secret mounts in docker-bake.hcl.
• Consumes them in the execution Dockerfile’s chef stage.

File	Summary
docker-bake.hcl	Adds OIDC environment secrets to Bake.
deployments/​Dockerfile.execution	Consumes the secrets but includes credential probing and an external callback.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.