Changeset 54108 for trunk/.github/workflows/test-npm.yml

Timestamp:

09/08/2022 11:39:17 PM (2 years ago)

Author:

desrosj

Message:

Build/Test Tools: Use the default GITHUB_TOKEN instead of a personal access token.

Previously, it was not possible to use the default GITHUB_TOKEN token to create new workflow runs in an effort to prevent accidental recursive workflows.

This has changed, and the workflow_dispatch is now one of two exceptions to this rule. Using GITHUB_TOKEN is preferred whenever possible to avoid the need for a PAT (personal access token), which expires (when created using the recommended security best practices), and is tied to an individual user.

See ​https://github.blog/changelog/2022-09-08-github-actions-use-github_token-with-workflow_dispatch-and-repository_dispatch/.

See #55652.

File:

• trunk/.github/workflows/test-npm.yml (modified) (1 diff)

trunk/.github/workflows/test-npm.yml

@@ -191 +191 @@
         uses: actions/github-script@c713e510dbd7d213d92d41b7a7805a986f4c5c66 # v6.2.0
         with:
-          github-token: ${{ secrets.GHA_WORKFLOW_DISPATCH }}
           script: |
             github.rest.actions.createWorkflowDispatch({