JDM170/build
1
0
Fork 0
mirror of https://github.com/armbian/build synced 2025-09-24 19:47:06 +07:00
Code Issues Packages Projects Releases Wiki Activity

Label on approved is running with wrong permissions

Browse Source 
pull_request_review might not grant required permissions. pull_request_target runs in the context of the base repository (i.e., the one the PR is targeting),
giving the correct access to secrets and permissions.
This commit is contained in:
Igor Pecovnik
2025-04-14 06:58:03 +02:00
parent 88ab0c5ad0
commit 39b0381c93
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
.github/workflows/pr-label-on-approved.yml vendored
View File

@@ -1,5 +1,5 @@
on: pull_request_review name: "Label approved pull requests"
name: Label approved pull requests on: pull_request_target
permissions: permissions:
contents: read # Required for checking changed files contents: read # Required for checking changed files
@@ -9,10 +9,10 @@ permissions:
jobs: jobs:
labelWhenApproved: labelWhenApproved:
if: ${{ github.repository_owner == 'armbian' }} if: ${{ github.repository_owner == 'armbian' }}
name: Label when approved name: "Label when approved"
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Label when approved - name: "Label when approved"
uses: pullreminders/label-when-approved-action@master uses: pullreminders/label-when-approved-action@master
env: env:
APPROVALS: "1" APPROVALS: "1"