(hudi-rs) branch main updated: ci: remove write perm and fix vulnerability (#572)

[xu...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

xushiyan pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/hudi-rs.git


The following commit(s) were added to refs/heads/main by this push:
     new bb978dc  ci: remove write perm and fix vulnerability (#572)
bb978dc is described below

commit bb978dc7fddff6a85897e74db02879d26678fe40
Author: Shiyan Xu <27...@users.noreply.github.com>
AuthorDate: Wed Apr 1 12:42:39 2026 -0500

    ci: remove write perm and fix vulnerability (#572)
---
 .github/workflows/pr.yml | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 64c7139..e71811f 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -25,7 +25,6 @@ on:
 
 permissions:
   contents: read
-  pull-requests: write
 
 jobs:
   check-pr:
@@ -39,12 +38,10 @@ jobs:
           node-version: 20
 
       - name: Linting commit
+        env:
+          PR_TITLE: ${{ github.event.pull_request.title }}
         run: |
           npm i -g conventional-changelog-conventionalcommits
           npm i -g commitlint@latest
-          echo "${{ github.event.pull_request.title }}" | npx commitlint
+          echo "$PR_TITLE" | npx commitlint
 
-      - name: Labeling
-        uses: actions/labeler@v6
-        # disable until figuring out a way to do this without pull_request_target
-        if: false