- Add SHA256 verification for k6 binary download (supply chain integrity) - Remove literal 'test-token' fallback for API_TOKEN in CI workflow; add validation step that fails if LOAD_TEST_API_TOKEN secret is missing - Replace 'test-token' fallback with empty string + warning in run-all.sh - Replace 'test-token' fallback with empty string in all 4 service scripts
3.5 KiB
3.5 KiB