Skip to content

Conversation

@MattDevy
Copy link
Contributor

  • uses ephemeral token so that backport PRs still trigger GitHub Actions checks
  • uses pull_request_target so that backporting PRs from forked repos works

* uses ephemeral token so that backport PRs still trigger GitHub Actions checks
* uses `pull_request_target` so that backporting PRs from forked repos works
@prodsecmachine
Copy link

prodsecmachine commented Nov 20, 2025

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@MattDevy MattDevy merged commit 39f8a22 into main Nov 20, 2025
17 checks passed
@MattDevy MattDevy deleted the ci/backport-token branch November 20, 2025 14:28
elastic-vault-github-plugin-prod bot pushed a commit that referenced this pull request Nov 20, 2025
* ci: use ephemeral token for backport action

* uses ephemeral token so that backport PRs still trigger GitHub Actions checks
* uses `pull_request_target` so that backporting PRs from forked repos works

* ci: update fetch-github-token action to specific commit version (best practice)

* ci: restrict backport action to only react to merged PRs, and backport labels

(cherry picked from commit 39f8a22)
elastic-vault-github-plugin-prod bot pushed a commit that referenced this pull request Nov 20, 2025
* ci: use ephemeral token for backport action

* uses ephemeral token so that backport PRs still trigger GitHub Actions checks
* uses `pull_request_target` so that backporting PRs from forked repos works

* ci: update fetch-github-token action to specific commit version (best practice)

* ci: restrict backport action to only react to merged PRs, and backport labels

(cherry picked from commit 39f8a22)
elastic-vault-github-plugin-prod bot pushed a commit that referenced this pull request Nov 20, 2025
* ci: use ephemeral token for backport action

* uses ephemeral token so that backport PRs still trigger GitHub Actions checks
* uses `pull_request_target` so that backporting PRs from forked repos works

* ci: update fetch-github-token action to specific commit version (best practice)

* ci: restrict backport action to only react to merged PRs, and backport labels

(cherry picked from commit 39f8a22)
MattDevy added a commit that referenced this pull request Nov 20, 2025
ci: use ephemeral token for backport action (#1047)

* ci: use ephemeral token for backport action

* uses ephemeral token so that backport PRs still trigger GitHub Actions checks
* uses `pull_request_target` so that backporting PRs from forked repos works

* ci: update fetch-github-token action to specific commit version (best practice)

* ci: restrict backport action to only react to merged PRs, and backport labels

(cherry picked from commit 39f8a22)

Co-authored-by: Matt Devy <32791943+MattDevy@users.noreply.github.com>
MattDevy added a commit that referenced this pull request Nov 20, 2025
ci: use ephemeral token for backport action (#1047)

* ci: use ephemeral token for backport action

* uses ephemeral token so that backport PRs still trigger GitHub Actions checks
* uses `pull_request_target` so that backporting PRs from forked repos works

* ci: update fetch-github-token action to specific commit version (best practice)

* ci: restrict backport action to only react to merged PRs, and backport labels

(cherry picked from commit 39f8a22)

Co-authored-by: Matt Devy <32791943+MattDevy@users.noreply.github.com>
MattDevy added a commit that referenced this pull request Nov 20, 2025
ci: use ephemeral token for backport action (#1047)

* ci: use ephemeral token for backport action

* uses ephemeral token so that backport PRs still trigger GitHub Actions checks
* uses `pull_request_target` so that backporting PRs from forked repos works

* ci: update fetch-github-token action to specific commit version (best practice)

* ci: restrict backport action to only react to merged PRs, and backport labels

(cherry picked from commit 39f8a22)

Co-authored-by: Matt Devy <32791943+MattDevy@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants