[llvm] [workflows] Avoid usage of access token in issue-write.yml (PR #94011)

Aiden Grossman via llvm-commits llvm-commits at lists.llvm.org
Wed Jul 17 00:01:25 PDT 2024


================
@@ -19,12 +19,22 @@ jobs:
     if: >
       github.event.workflow_run.event == 'pull_request'
     steps:
+      - name: Fetch Sources
+        uses: actions/checkout at v4
+        with:
+          sparse-checkout: |
+            .github/workflows/unprivileged-download-artifact/action.yml
+          sparse-checkout-cone-mode: false
       - name: 'Download artifact'
-        uses: actions/download-artifact at 6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1
+        uses: ./.github/workflows/unprivileged-download-artifact
+        id: download-artifact
         with:
-          github-token: ${{ secrets.ISSUE_WRITE_DOWNLOAD_ARTIFACT }}
           run-id: ${{ github.event.workflow_run.id }}
-          name: workflow-args
+          artifact-name: workflow-args
+
+      - name: Unpack Artifact
+        run: |
+          unzip ${{ steps.download-artifact.outputs.filename }}
----------------
boomanaiden154 wrote:

Can we do this in the action similar to how `download-artifact` does it?

https://github.com/llvm/llvm-project/pull/94011


More information about the llvm-commits mailing list