[llvm] [GitHub][workflows] Ask reviewers to merge PRs when author cannot (PR #81142)

David Spickett via llvm-commits llvm-commits at lists.llvm.org
Tue Feb 13 06:50:30 PST 2024


DavidSpickett wrote:

CI is failing because it's running the workflow from my fork, but it gets the script from main which doesn't have the new action of course. This is expected.

Which seemed a bit scary to me, but going off of https://github.blog/2023-08-09-four-tips-to-keep-your-github-actions-workflows-secure/ "An important security guarantee that GitHub makes is that workflows triggered on pull_request from forks are run with minimal privileges: no access to secrets and the repository token is read-only. " - the workflow wouldn't have been able to post a comment anyway.

https://github.com/llvm/llvm-project/pull/81142


More information about the llvm-commits mailing list