File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 2828# Why split it?
2929# "The GITHUB_TOKEN has read-only permissions in pull requests from forked
3030# repositories."
31- # — https://docs.github.com/en/actions/reference/events-that-trigger-workflows#pull_request
31+ # https://docs.github.com/en/actions/reference/events-that-trigger-workflows#pull_request
3232# A read-only token cannot post comments, so on fork PRs the previous
3333# single-workflow design failed with HTTP 403. We can't simply broaden the
3434# trigger here either: cargo-semver-checks compiles PR code (build.rs, proc
Original file line number Diff line number Diff line change 1515# specific language governing permissions and limitations
1616# under the License.
1717
18- # Companion to `breaking_changes_detector.yml` — posts the sticky PR comment.
18+ # Companion to `breaking_changes_detector.yml`. Posts the sticky PR comment.
1919#
2020# Why this workflow exists:
2121# "The GITHUB_TOKEN has read-only permissions in pull requests from forked
2222# repositories."
23- # — https://docs.github.com/en/actions/reference/events-that-trigger-workflows#pull_request
23+ # https://docs.github.com/en/actions/reference/events-that-trigger-workflows#pull_request
2424# That is why the upstream `pull_request` workflow cannot post the comment
2525# itself when the PR comes from a fork.
2626#
2727# Why not `pull_request_target`? ASF infra policy forbids it:
2828# "You MUST NOT use `pull_request_target` as a trigger on ANY action that
2929# exports ANY confidential credentials or tokens such as GITHUB_TOKEN or
3030# NPM_TOKEN."
31- # — https://infra.apache.org/github-actions-policy.html
31+ # https://infra.apache.org/github-actions-policy.html
3232# `workflow_run` is the supported alternative: it runs in the base
3333# repository's context regardless of where the upstream run was triggered
3434# from, so the GITHUB_TOKEN here can be granted `pull-requests: write`. See:
You can’t perform that action at this time.
0 commit comments