(camel) branch fix-component-test-ga-token-exposure created (now a1de7aeb2f6)

[nf...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

nfilotto pushed a change to branch fix-component-test-ga-token-exposure
in repository https://gitbox.apache.org/repos/asf/camel.git


      at a1de7aeb2f6 (chore) ci: avoid token exposure in pr-comment workflow

This branch includes the following new commits:

     new a1de7aeb2f6 (chore) ci: avoid token exposure in pr-comment workflow

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.

(camel) 01/01: (chore) ci: avoid token exposure in pr-comment workflow

[nf...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

nfilotto pushed a commit to branch fix-component-test-ga-token-exposure
in repository https://gitbox.apache.org/repos/asf/camel.git

commit a1de7aeb2f652d46b4eb177824f571c43e2af1f1
Author: Nicolas Filotto <nf...@talend.com>
AuthorDate: Tue Oct 31 19:46:04 2023 +0100

    (chore) ci: avoid token exposure in pr-comment workflow
---
 .github/workflows/pr-comment.yml | 13 ++++---------
 1 file changed, 4 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/pr-comment.yml b/.github/workflows/pr-comment.yml
index f1d78120c33..f70ca0424b1 100644
--- a/.github/workflows/pr-comment.yml
+++ b/.github/workflows/pr-comment.yml
@@ -32,16 +32,11 @@ jobs:
       matrix:
         java: [ '17' ]
     steps:
-      - uses: actions/github-script@v6
+      - uses: peter-evans/create-or-update-comment@v3
         with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          script: |
-            github.rest.issues.createComment({
-              issue_number: context.issue.number,
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              body: `:robot: The Apache Camel test robot will run the tests for you :+1:`
-            })
+          issue-number: ${{ context.issue.number }}
+          body: |
+            :robot: The Apache Camel test robot will run the tests for you :+1:
       - name: Retrieve sha
         uses: actions/github-script@v6
         with: