From d60a25b211a22d142b1fda6d0ebc42f39b172c41 Mon Sep 17 00:00:00 2001 From: Lucas Nicodemus Date: Sun, 23 May 2021 13:14:21 -0700 Subject: [PATCH] Use GitHub token built into GHA Okay, now we're at problem 74 with github actions. Basically, github actions doesn't send secrets to forks because duh, that makes sense. So even if you make a super restricted token you still can't send it to forks because github still doesn't understand how to make a security platform when they just copy paste azure pipelines into github and then say "well looks good to me" and ship fucking arbitrary code execution to the entire fucking world and then try to retroactively fix all of their mistakes and fail miserably in the process --- .github/workflows/danger.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/danger.yml b/.github/workflows/danger.yml index f7dd8cc2..e8e4b463 100644 --- a/.github/workflows/danger.yml +++ b/.github/workflows/danger.yml @@ -18,5 +18,5 @@ jobs: noChangelogLabel: Blocked checkNotification: Simple env: - GITHUB_TOKEN: ${{ secrets.CARDINAL_PAT_CI_STATUS }} + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}