Check the token's owner and repository when registering a runner (#30406) (#30412)

Backport #30406 Fix #30378
2026-09-08 22:13:26 +09:00 · 2024-04-11 11:29:53 +00:00
parent 245e8d10c2
commit 55990ebf92
4 changed files with 19 additions and 0 deletions
@@ -164,6 +164,7 @@ func DeleteRepositoryDirectly(ctx context.Context, doer *user_model.User, uid, r
 		&actions_model.ActionScheduleSpec{RepoID: repoID},
 		&actions_model.ActionSchedule{RepoID: repoID},
 		&actions_model.ActionArtifact{RepoID: repoID},
+		&actions_model.ActionRunnerToken{RepoID: repoID},
 	); err != nil {
 		return fmt.Errorf("deleteBeans: %w", err)
 	}