fix: use CI user PAT to bypass branch protections #86
Conversation
0marperez
force-pushed
the
fix-auto-merge-credentials
branch
from
5d25878 to
5e96c91
Compare
| ci-user-pat: | ||
| description: The CI user's personal access token to write to the repo |
There was a problem hiding this comment.
Why does this need to be an input, is this not accessible through {{ secrets.CI_USER_PAT }} (using the secrets from whichever repo invoked this action)?
There was a problem hiding this comment.
No, secrets are not accessible through the action. You can see a run here where it didn't work:
https://github.com/awslabs/aws-kotlin-repo-tools/actions/runs/14479267339/job/40612416547
I think I found a better way to pass secrets to the action than what I'm using now:
https://docs.github.com/en/actions/sharing-automations/reusing-workflows#passing-inputs-and-secrets-to-a-reusable-workflow
There was a problem hiding this comment.
Actually never mind the "better" way, it seems like it doesn't work for actions.
There was a problem hiding this comment.
This entire merge-main process could probably be restructured as a reusable workflow instead of an action, but I think it's out of scope for now
0marperez
force-pushed
the
fix-auto-merge-credentials
branch
from
cecb3ab to
c711cf7
Compare
0marperez
changed the title
3 participants
Issue #, if available:
SDK-KT-610
Description of changes:
Need to assume the CI role to bypass branch protection rules
By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.