Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update grafanabot_reviewer.yml to use app token #10809

Merged
merged 7 commits into from
Mar 5, 2025

Conversation

armandgrillet
Copy link
Contributor

@armandgrillet armandgrillet commented Mar 5, 2025

Due to https://github.com/grafana/deployment_tools/tree/master/docs/platform/continuous-integration#avoid-pull_request_target the workflow had to be changed from on: pull_request_target to on: pull_request. However that is fine as Grot PRs are created in the upstream repository thus that only makes the workflow safer!

@armandgrillet armandgrillet self-assigned this Mar 5, 2025
@armandgrillet armandgrillet requested a review from a team as a code owner March 5, 2025 10:25
Copy link
Contributor

github-actions bot commented Mar 5, 2025

This PR from grafanabot requires manual review.

@armandgrillet
Copy link
Contributor Author

We can see from that message and https://github.com/grafana/mimir/actions/runs/13674321077/job/38231333682 that the workflow still works.

Copy link
Contributor

@narqo narqo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think, it may not work in practice — it doesn't work in the main branch — due to the author of the PR and reviewer cannot be the same (providing the mimir-github-bot:app_id belongs to grafanabot).

But this is not the problem of the change, let's finish getting rig of PAT's first, and get to fixing what's been already broken after 🔥

Update I think, the GitHub app will use the mimir-github-bot[bot] user. So we should be good. I.e. the app should be able to approve the grafanabot's PRs now

@narqo narqo merged commit c543778 into main Mar 5, 2025
29 checks passed
@narqo narqo deleted the armandgrillet/grafanabot_reviewer.yml branch March 5, 2025 11:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants