Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Conversation

@jtmcg
Copy link
Contributor

@jtmcg jtmcg commented Mar 6, 2025

Changes

Previously, we were getting these tokens from repository secrets. We have moved the tokens to environment secrets, so we need to inject these environments into our workflows so they'll pick up the secrets.

Previously, we were getting the token from repository secrets. We have
moved the token to its own environment secret in the
cli-discuss-automation environment. It is in its own environment so that
we don't inject our other secrets into this workflow as we don't need
them here.
@jtmcg jtmcg requested a review from a team as a code owner March 6, 2025 19:14
@jtmcg jtmcg requested a review from williammartin March 6, 2025 19:14
Copy link
Member

@williammartin williammartin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we should create a new (or share with triage) environment for the issueauto and prauto workflows. I don't think it's right that they should get access to all the production secrets.

It doesn't appear to me as if AUTOMATION_TOKEN is used anywhere else.

@jtmcg
Copy link
Contributor Author

jtmcg commented Mar 7, 2025

I think we should create a new (or share with triage) environment for the issueauto and prauto workflows. I don't think it's right that they should get access to all the production secrets.

It doesn't appear to me as if AUTOMATION_TOKEN is used anywhere else.

This is a good suggestion. I think I'd prefer them to be in the same place, but the cli-discuss-automation environment doesn't make sense for the AUTOMATION_TOKEN, so I've made a new environment for it for now. If we want to move the CLI_DISCUSSION_TRIAGE_TOKEN to the new env, you'll need to do that yourself, @williammartin

@jtmcg jtmcg requested a review from williammartin March 7, 2025 20:07
@williammartin williammartin merged commit af4acb3 into trunk Mar 10, 2025
14 checks passed
@williammartin williammartin deleted the jtmcg/update-triage-workflow branch March 10, 2025 13:03
@williammartin
Copy link
Member

LGTM. Once we confirm this works we can remove the duplicately named secrets from the production envrionment.

tmeijn pushed a commit to tmeijn/dotfiles that referenced this pull request Mar 26, 2025
This MR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cli/cli](https://github.com/cli/cli) | minor | `v2.68.1` -> `v2.69.0` |

MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot).

**Proposed changes to behavior should be submitted there as MRs.**

---

### Release Notes

<details>
<summary>cli/cli (cli/cli)</summary>

### [`v2.69.0`](https://github.com/cli/cli/releases/tag/v2.69.0): GitHub CLI 2.69.0

[Compare Source](cli/cli@v2.68.1...v2.69.0)

#### What's Changed

##### Features

-   Commands that accept filepath arguments will do glob expansion for `*` characters, by [@&#8203;iamazeem](https://github.com/iamazeem) in cli/cli#10413

##### Bug Fixes

-   `gh issue/pr comment --edit-last` no longer creates a comment in non-interactive mode if there weren't one. A new flag `--create-if-none` provides this behaviour, by [@&#8203;andyfeller](https://github.com/andyfeller) in cli/cli#10625
-   `gh repo sync` provides a more informative error for missing workflow permissions when the token is provided by a GitHub app, by [@&#8203;wata727](https://github.com/wata727) in cli/cli#10574
-   `gh api` no longer tries to encode URLs incorrectly, by [@&#8203;williammartin](https://github.com/williammartin) in cli/cli#10630

##### Other

-   Add cli-discuss-automation environment to triage.md by [@&#8203;jtmcg](https://github.com/jtmcg) in cli/cli#10552
-   chore: remove redundant word in comment by [@&#8203;kevincatty](https://github.com/kevincatty) in cli/cli#10586
-   Bump golang.org/x/net from 0.34.0 to 0.36.0 by [@&#8203;dependabot](https://github.com/dependabot) in cli/cli#10593

#### New Contributors

-   [@&#8203;kevincatty](https://github.com/kevincatty) made their first contribution in cli/cli#10586
-   [@&#8203;wata727](https://github.com/wata727) made their first contribution in cli/cli#10574

**Full Changelog**: cli/cli@v2.68.1...v2.69.0

</details>

---

### Configuration

πŸ“… **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

β™» **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

πŸ”• **Ignore**: Close this MR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box

---

This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMTMuNSIsInVwZGF0ZWRJblZlciI6IjM5LjIxMy41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJSZW5vdmF0ZSBCb3QiXX0=-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants