[llvm] [CI] Make email check workflow fail when author's email is private in Github UI (PR #148694)

Aiden Grossman via llvm-commits llvm-commits at lists.llvm.org
Wed Jul 16 07:22:06 PDT 2025


================
@@ -20,14 +20,30 @@ jobs:
 
       - name: Extract author email
         id: author
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
----------------
boomanaiden154 wrote:

What's the reason for using `secrets.GITHUB_TOKEN` instead of the default `GITHUB_TOKEN`? Does this have permissions that the other one does not?

It's preferable to use `GITHUB_TOKEN` if possible as it is an ephemeral token that gets revoked after every job which makes exploitation much harder.

https://github.com/llvm/llvm-project/pull/148694


More information about the llvm-commits mailing list