Make WordPress Core


Ignore:
Timestamp:
09/08/2022 11:39:17 PM (21 months ago)
Author:
desrosj
Message:

Build/Test Tools: Use the default GITHUB_TOKEN instead of a personal access token.

Previously, it was not possible to use the default GITHUB_TOKEN token to create new workflow runs in an effort to prevent accidental recursive workflows.

This has changed, and the workflow_dispatch is now one of two exceptions to this rule. Using GITHUB_TOKEN is preferred whenever possible to avoid the need for a PAT (personal access token), which expires (when created using the recommended security best practices), and is tied to an individual user.

See https://github.blog/changelog/2022-09-08-github-actions-use-github_token-with-workflow_dispatch-and-repository_dispatch/.

See #55652.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/.github/workflows/php-compatibility.yml

    r54039 r54108  
    133133        uses: actions/github-script@c713e510dbd7d213d92d41b7a7805a986f4c5c66 # v6.2.0
    134134        with:
    135           github-token: ${{ secrets.GHA_WORKFLOW_DISPATCH }}
    136135          script: |
    137136            github.rest.actions.createWorkflowDispatch({
Note: See TracChangeset for help on using the changeset viewer.