Set up an auto-update workflow for gha.sum on Pull Requests from Dependabot
#44
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
ericcornelissen
added
ci/cd
ericcornelissen
commented
Mar 22, 2024
Create a GitHub Actions workflow that automatically updates the
checksums in gha.sum for Pull Requests by Dependabot that update a
GitHub Action (leveraging `branches: dependabot/github_actions/**`).
This workflow utilizes a bot to be able to push the changes as well as
cause the created commit to trigger CI workflows. The secret it utilizes
must be configured for Dependabot (go to repository Settings > Secrets
and variables > Dependabot). The bot also requires permissions to "Read
and write" for the "Repository permissions" category called "Workflows".
The `if: ${{ github.actor == 'dependabot[bot]' }}` condition ensures the
workflow isn't (re-)run for the commit it creates. Besides avoiding a
potential infinite loop, it also avoids an error due to the (Dependabot
scoped) secrets not being available.
This change introduces two new GitHub Actions dependencies. One is used
to generate an access token from a GitHub app The other is used to
simplify the creation and pushing of a commit to the Pull Request
branch.
ericcornelissen
force-pushed
the
auto-update-checksums
branch
from
82b4845
to
4d923c1
Compare
|
This approach utilizes a bot1 to be able to push the changes as well as cause the created commit to trigger CI workflows. The secret it utilizes must be configured for Dependabot (go to repository Settings > Secrets and variables > Dependabot). The bot also requires permissions to "Read and write" for the "Repository permissions" category called "Workflows". The Footnotes
|
|
Note: this worked successfully in #47 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Relates to #9
Summary
Create a GitHub Actions workflow that automatically updates the checksums in
gha.sumfor Pull Requests by Dependabot that update a GitHub Action (as identified bybranches: dependabot/github_actions/**).