You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by nf...@apache.org on 2023/10/31 18:46:38 UTC
(camel) 01/01: (chore) ci: avoid token exposure in pr-comment workflow
This is an automated email from the ASF dual-hosted git repository.
nfilotto pushed a commit to branch fix-component-test-ga-token-exposure
in repository https://gitbox.apache.org/repos/asf/camel.git
commit a1de7aeb2f652d46b4eb177824f571c43e2af1f1
Author: Nicolas Filotto <nf...@talend.com>
AuthorDate: Tue Oct 31 19:46:04 2023 +0100
(chore) ci: avoid token exposure in pr-comment workflow
---
.github/workflows/pr-comment.yml | 13 ++++---------
1 file changed, 4 insertions(+), 9 deletions(-)
diff --git a/.github/workflows/pr-comment.yml b/.github/workflows/pr-comment.yml
index f1d78120c33..f70ca0424b1 100644
--- a/.github/workflows/pr-comment.yml
+++ b/.github/workflows/pr-comment.yml
@@ -32,16 +32,11 @@ jobs:
matrix:
java: [ '17' ]
steps:
- - uses: actions/github-script@v6
+ - uses: peter-evans/create-or-update-comment@v3
with:
- github-token: ${{ secrets.GITHUB_TOKEN }}
- script: |
- github.rest.issues.createComment({
- issue_number: context.issue.number,
- owner: context.repo.owner,
- repo: context.repo.repo,
- body: `:robot: The Apache Camel test robot will run the tests for you :+1:`
- })
+ issue-number: ${{ context.issue.number }}
+ body: |
+ :robot: The Apache Camel test robot will run the tests for you :+1:
- name: Retrieve sha
uses: actions/github-script@v6
with: