[llvm] [CI] Make email check workflow fail when author's email is private in Github UI (PR #148694)
Aiden Grossman via llvm-commits
llvm-commits at lists.llvm.org
Wed Jul 16 07:22:06 PDT 2025
================
@@ -20,14 +20,30 @@ jobs:
- name: Extract author email
id: author
+ env:
+ GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
----------------
boomanaiden154 wrote:
What's the reason for using `secrets.GITHUB_TOKEN` instead of the default `GITHUB_TOKEN`? Does this have permissions that the other one does not?
It's preferable to use `GITHUB_TOKEN` if possible as it is an ephemeral token that gets revoked after every job which makes exploitation much harder.
https://github.com/llvm/llvm-project/pull/148694
More information about the llvm-commits
mailing list