Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add custom token to community contributions workflow #123

Merged
merged 1 commit into from
Oct 31, 2023

Commits on Dec 9, 2022

  1. Add custom token to community contributions workflow

    The pause-community-contributions workflow makes a call to the
    GitHub API to check if the person contributing is a member of
    the organization.
    
    However, this call currently fails if the contributor has set their
    membership to 'private'.
    
    This is because the default token provided for GitHub Actions only
    has permissions for the repository, not for the organization. With
    this token, we're not allowed to see private memberships.
    
    We've created a custom, org-wide secret containing a personal token
    that has permissions to read organization membership.
    
    Unfortunately the secret cannot be accessed directly by the shared
    workflow, it has to be passed in.
    
    We updated the shared workflow to use the token, if it is provided,
    and this PR updates the workflow in this repo to pass the secret.
    
    Until this is merged, contributions from people with private membership
    in the Exercism organization will be automatically closed.
    
    Note that this PR also removes the workflow_dispatch which fails if
    you try to use it.
    kytrinyx committed Dec 9, 2022
    Configuration menu
    Copy the full SHA
    7b45a8a View commit details
    Browse the repository at this point in the history