Skip to content

GitHub Actions: Upgrade pre-commit and drop the removed token #9267

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Mar 6, 2024

Conversation

cclauss
Copy link
Contributor

@cclauss cclauss commented Feb 28, 2024

Removes some warnings at the bottom right of https://github.com/encode/django-rest-framework/actions/runs/8079303418

https://github.com/pre-commit/action#using-this-action-in-private-repositories explains why token was removed but is a bit difficult to understand.

Moving to running pre-commit on https://pre-commit.ci has proved to be the best solution on other projects.

Note: Before submitting this pull request, please review our contributing guidelines.

Description

Please describe your pull request. If it fixes a bug or resolves a feature request, be sure to link to that issue. When linking to an issue, please use refs #... in the description of the pull request.

- uses: pre-commit/action@v3.0.0
with:
token: ${{ secrets.GITHUB_TOKEN }}
- uses: pre-commit/action@v3.0.1
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

reasons for this?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The first URL of the commit message explains that we were being warned that we were misusing @v3.0.0

The second URL of the commit message explains that pre-commit/action was upgraded to properly deal with the token. https://docs.github.com/en/actions/security-guides/automatic-token-authentication

The fifth URL of the commit message points to the Action author's explanation of why the repo was unarchived to make the v3.0.1 change.

@cclauss cclauss requested a review from auvipy March 6, 2024 12:37
@auvipy auvipy merged commit 6cbd4b7 into encode:master Mar 6, 2024
@cclauss cclauss deleted the patch-3 branch March 6, 2024 13:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants