From dc010aff826a8796b40a552c51e2d40f7cec648e Mon Sep 17 00:00:00 2001 From: Tim te Beek Date: Wed, 28 Feb 2024 13:52:03 +0000 Subject: [PATCH] refactor: Remove token from automated code reviews Use this link to re-run the recipe: https://app.moderne.io/recipes/builder/GoAESmXCQ?organizationId=NTdlNDAzNjYtNmJkOC00MzNjLWJmMDQtMGI2MWRkZTEyYzg5 Co-authored-by: Moderne --- .github/workflows/comment-pr.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/comment-pr.yml b/.github/workflows/comment-pr.yml index f30bbd9f..e5596102 100644 --- a/.github/workflows/comment-pr.yml +++ b/.github/workflows/comment-pr.yml @@ -1,15 +1,15 @@ name: comment-pr + # https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#using-data-from-the-triggering-workflow on: workflow_run: workflows: ["receive-pr"] types: - completed + # https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ # Since this pull request has write permissions on the target repo, we should **NOT** execute any untrusted code. jobs: post-suggestions: if: ${{ github.event.workflow_run.conclusion == 'success' }} uses: openrewrite/gh-automation/.github/workflows/comment-pr.yml@main - secrets: - GH_PAT_ACTIONS_READ: ${{ secrets.GH_PAT_ACTIONS_READ }}