-
Notifications
You must be signed in to change notification settings - Fork 8
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Double tokenisation #1
Comments
Hi, sorry for the delay. |
A lot of actions use 'token' to authenticate actions, like placing comments. Since this was also the 'key' of the token your action uses to authenticate into private repos, it was passed on, and other actions started to do things as the user that created the Private Access Token. I wanted to have the other actions to act as 'Github bot', which has enough permissions to place comments on the current repo's PR's. Since we don't have our own bot account, and we really didn't want to use a real user. |
I've released a new version, thanks for the feedback |
Hey, awesome action, but most actions probably already use token. Currently using this Im seeing actions as my own user, not as github-bot. I've forked and renamed it into pattoken, which allows for token usage in other actions, and will perform those actions as the github bot.
Please review vandijkstef/use-private-action@v0.0.2
The text was updated successfully, but these errors were encountered: