Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dependabot pull request labeler and CI issues #1342

Closed
chrismatix opened this issue Mar 23, 2021 · 3 comments · Fixed by #1831
Closed

Dependabot pull request labeler and CI issues #1342

chrismatix opened this issue Mar 23, 2021 · 3 comments · Fixed by #1831
Assignees
Labels

Comments

@chrismatix
Copy link
Contributor

A few of our dependabot PRs are encountering the following failure:

image

@chrismatix
Copy link
Contributor Author

workflow runs that are triggered by Dependabot from push, pull_request, pull_request_review, or pull_request_review_comment events will be treated as if they were opened from a repository fork.

https://github.blog/changelog/2021-02-19-github-actions-workflows-triggered-by-dependabot-prs-will-run-with-read-only-permissions/

This issue is tracked here: TimonVS/pr-labeler-action#25

And a more in-depth discussion can be found here: actions/labeler#12

Just setting the trigger to pull_request_target does not seem to work, so we may have to patch the action.

@chrismatix
Copy link
Contributor Author

Workaround suggestion provided by Github support: dependabot/dependabot-core#3253 (comment)

@chrismatix
Copy link
Contributor Author

Perhaps it's also worth considering switching to https://docs.renovatebot.com/ as some other users in that thread have suggested doing. This may be faster.

chrismatix pushed a commit that referenced this issue May 25, 2021
@chrismatix chrismatix changed the title Intermittent pull request labeler issues Dependabot pull request labeler and CI issues May 25, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
1 participant