Keep workflow trigger after auto-commit on external contribution PR #292
-
I have a workflow that checks out the repo (with a My issue is the following: for a PR I make on my repo from another branch, everything works fine and I have the intended behavior. A workaround could be to use the To sum up, is there a way to keep a workflow triggered from the auto-commit without exposing secrets to an external contribution? |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 10 replies
-
Hey We have a dedicated section about how to setup the Action to run for forks of public repositories here: https://github.com/stefanzweifel/git-auto-commit-action#use-in-forks-from-public-repositories In that workflow, there is no need for a PAT, if you don't use protected branches. Personal access token are ususally only needed if your repository uses protected branches or you must trigger another workflow run from commits made with this action. If you must have secrets in your workflow and they need to be run for contributors, I actually don't know how to do that either. Would also need to do some research on this. (In a personal project of mine, I also must use secrets for an AWS account and I haven't figured out yet, how do make them safely available to contributors or dependabot. There is a special "Dependabot" section for secrets, but I don't think that works for contributors using public forks) |
Beta Was this translation helpful? Give feedback.
Hey
We have a dedicated section about how to setup the Action to run for forks of public repositories here: https://github.com/stefanzweifel/git-auto-commit-action#use-in-forks-from-public-repositories
In that workflow, there is no need for a PAT, if you don't use protected branches.
Could you give that a try?
Personal access token are ususally only needed if your repository uses protected branches or you must trigger another workflow run from commits made with this action.
If you must have secrets in your workflow and they need to be run for contributors, I actually don't know how to do that either. Would also need to do some research on this.
(In a personal project of mine, I also must u…