-
-
Notifications
You must be signed in to change notification settings - Fork 49
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update to support GITHUB_TOKEN #29
Conversation
Merge changes
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The ACTOR variable has been defined, we should keep use it, and its default value is the same as GITHUB_ACTION
.
perf: revise actor variable
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Now the input variable ACTOR
is right for its intention.
Using a personal access token is strongly discouraged by GITHUB because it is a serious security risk. This PR updates the action to use the standard GITHUB_TOKEN which can be limited in scope and is re-generated after each workflow run.
I have tested it on my own repository using a GH_TOKEN and a GITHUB_TOKEN and it works for both, so existing users will not be required to update their code if they do not want to.