[llvm] [workflows] Avoid usage of access token in issue-write.yml (PR #94011)

Aiden Grossman via llvm-commits llvm-commits at lists.llvm.org
Thu Jul 18 18:34:16 PDT 2024


boomanaiden154 wrote:

> The advantage for upstream is that it's one less secret for us to maintain.

> And also composite actions don't have access to secrets, so if you want to download an artifact in a composite action you need to add an extra parameter for the secret.

Makes sense. It would be nice if Github would allow this in the upstream action, but maybe the security argument there makes sense.

https://github.com/llvm/llvm-project/pull/94011


More information about the llvm-commits mailing list