[llvm] [workflows] Avoid usage of access token in issue-write.yml (PR #94011)
    Aiden Grossman via llvm-commits 
    llvm-commits at lists.llvm.org
       
    Wed Jul 17 00:01:25 PDT 2024
    
    
  
================
@@ -19,12 +19,22 @@ jobs:
     if: >
       github.event.workflow_run.event == 'pull_request'
     steps:
+      - name: Fetch Sources
+        uses: actions/checkout at v4
+        with:
+          sparse-checkout: |
+            .github/workflows/unprivileged-download-artifact/action.yml
+          sparse-checkout-cone-mode: false
       - name: 'Download artifact'
-        uses: actions/download-artifact at 6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1
+        uses: ./.github/workflows/unprivileged-download-artifact
+        id: download-artifact
         with:
-          github-token: ${{ secrets.ISSUE_WRITE_DOWNLOAD_ARTIFACT }}
           run-id: ${{ github.event.workflow_run.id }}
-          name: workflow-args
+          artifact-name: workflow-args
+
+      - name: Unpack Artifact
+        run: |
+          unzip ${{ steps.download-artifact.outputs.filename }}
----------------
boomanaiden154 wrote:
Can we do this in the action similar to how `download-artifact` does it?
https://github.com/llvm/llvm-project/pull/94011
    
    
More information about the llvm-commits
mailing list