Skip to content

Conversation

@paulRbr
Copy link
Member

@paulRbr paulRbr commented Dec 9, 2024

It seems there was some missing tokens for some APIs introduced by
PR #30

This commit makes sure the automatic workflow on the main branch
gets fixed!

It seems there was some missing tokens for some APIs introduced by
PR#30.

This commit makes sure the automatic workflow on the `main` branch
gets fixed!
@paulRbr paulRbr self-assigned this Dec 9, 2024
@paulRbr paulRbr requested a review from Polo2 December 9, 2024 10:05
@github-actions
Copy link

github-actions bot commented Dec 9, 2024

ℹ️ API content change detected:

No structural change, nothing to display.

Powered by Bump.sh

When triggering the Diff on Bump.sh we need to use the
`pull_request_target` workflow event to be able to have the private
token on forked PRs.

It's safe to do so because the `pull_request_target` event uses the
base branch code (not the unsafe PR code) to run the workflow (which
prevents any malicious users to alter the currently defined
.github/workflows/diff.yml workflow to try to read the private token)
Copy link
Member

@Polo2 Polo2 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

good catch

@paulRbr paulRbr merged commit 35a43db into bump-sh:main Dec 9, 2024
3 checks passed
@paulRbr paulRbr deleted the debug-deploy-script branch December 9, 2024 13:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants