From 08ff2909136d75f6422b671d63ee907ea8bc4069 Mon Sep 17 00:00:00 2001 From: Misha Sugakov Date: Fri, 21 Nov 2025 10:57:42 +0100 Subject: [PATCH 1/3] Switch tag-more-reviewers to target repo in case of forks --- .github/workflows/tag-more-reviewers.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/tag-more-reviewers.yaml b/.github/workflows/tag-more-reviewers.yaml index f4233751c..74efd5332 100644 --- a/.github/workflows/tag-more-reviewers.yaml +++ b/.github/workflows/tag-more-reviewers.yaml @@ -1,7 +1,7 @@ name: Tag more reviewers on: - pull_request: + pull_request_target: types: - review_requested From 2c594d56ad2946b7356e07f2fe45120dedd30963 Mon Sep 17 00:00:00 2001 From: Misha Sugakov Date: Fri, 21 Nov 2025 10:59:05 +0100 Subject: [PATCH 2/3] Change renovate config ownership and adjust comment --- .github/CODEOWNERS | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 36d2d0958..bab095cb2 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -4,12 +4,11 @@ * @stackrox/scanner -# The Konflux maintainers for ACS review all changes related to the Konflux pipelines, such as new -# pipelines, parameter changes or automated task updates as well as Dockerfile updates. +# The Konflux maintainers for ACS review all changes related to the Konflux pipelines, Dockerfiles, etc. # Release engineers need to merge MintMaker PRs at the time of release. # rhacs-bot needs ability to auto-approve MintMaker PRs for automated task and security updates. **/konflux.*Dockerfile @stackrox/konflux-maintainers-no-email @stackrox/release-mgmt-no-email @rhacs-bot /.konflux/ @stackrox/konflux-maintainers-no-email @stackrox/release-mgmt-no-email @rhacs-bot /.tekton/ @stackrox/konflux-maintainers-no-email @stackrox/release-mgmt-no-email @rhacs-bot rpms.* @stackrox/konflux-maintainers-no-email @stackrox/release-mgmt-no-email @rhacs-bot -.github/renovate.json5 @stackrox/konflux-maintainers-no-email @stackrox/release-mgmt-no-email +.github/renovate.json5 @stackrox/konflux-maintainers From 58ab388002b28e683b316d32a4ffd6794cda655f Mon Sep 17 00:00:00 2001 From: Misha Sugakov Date: Mon, 24 Nov 2025 12:44:57 +0100 Subject: [PATCH 3/3] Use less of `pull_request_target`-s --- .github/workflows/auto-approve.yml | 2 +- .github/workflows/tag-more-reviewers.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/auto-approve.yml b/.github/workflows/auto-approve.yml index 5277bbace..85579a05d 100644 --- a/.github/workflows/auto-approve.yml +++ b/.github/workflows/auto-approve.yml @@ -1,7 +1,7 @@ name: auto-merge on: - pull_request_target: + pull_request: types: - labeled diff --git a/.github/workflows/tag-more-reviewers.yaml b/.github/workflows/tag-more-reviewers.yaml index 74efd5332..f4233751c 100644 --- a/.github/workflows/tag-more-reviewers.yaml +++ b/.github/workflows/tag-more-reviewers.yaml @@ -1,7 +1,7 @@ name: Tag more reviewers on: - pull_request_target: + pull_request: types: - review_requested