Commit e6f7db9
committed
Use
Using `github-pr-review` requires elevated write permissions to the
repository, just to write a review, which can compromise the security
of the repository, by using the `pull_request_target` event which gives
the GitHub token write access, or using a custom token which complicates
the setup.
To simplify things we switch back to `github-check` reporter, which is
the repo-config default and doesn't need any write permissions, and
failed checks will still be shown in the diff view.
We also pin the protolint version to `0.52.0` to avoid any surprises
with future versions, also as repo-config does.
https://github.com/reviewdog/reviewdog?tab=readme-ov-file#reporter-github-pr-annotations--reportergithub-pr-annotations
Signed-off-by: Leandro Lucarella <[email protected]>github-check reporter for protolint1 parent 1cc05ae commit e6f7db9
1 file changed
+2
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
47 | 47 | | |
48 | 48 | | |
49 | 49 | | |
50 | | - | |
| 50 | + | |
| 51 | + | |
51 | 52 | | |
52 | 53 | | |
53 | 54 | | |
| |||
0 commit comments