Skip to content

Commit dce06de

Browse files
chagongCopilot
andauthored
Use built-in token for public team-memory source reads (#1775)
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
1 parent b1035e0 commit dce06de

1 file changed

Lines changed: 1 addition & 31 deletions

File tree

‎.github/workflows/team-memory-coordinator.yml‎

Lines changed: 1 addition & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -61,44 +61,14 @@ jobs:
6161
"microsoft/java-debug":102583752,
6262
"microsoft/build-server-for-gradle":626812412}
6363
steps:
64-
- name: Select allowlisted source for read-only authentication
65-
id: selection
66-
shell: bash
67-
env:
68-
SOURCE_REPOSITORY: ${{ inputs.source_repository }}
69-
run: |
70-
if ! jq -e --arg repository "$SOURCE_REPOSITORY" 'has($repository)' <<< "$ISSUELENS_SOURCE_REPOSITORIES" > /dev/null; then
71-
echo "::error::Source repository is not allowlisted"
72-
exit 1
73-
fi
74-
echo "source-name=${SOURCE_REPOSITORY#microsoft/}" >> "$GITHUB_OUTPUT"
75-
if [[ "$SOURCE_REPOSITORY" == "microsoft/vscode-java-pack" ]]; then
76-
echo "external=false" >> "$GITHUB_OUTPUT"
77-
else
78-
echo "external=true" >> "$GITHUB_OUTPUT"
79-
fi
80-
81-
- name: Get read-only token for the selected external source
82-
if: steps.selection.outputs.external == 'true'
83-
id: source-token
84-
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3
85-
with:
86-
client-id: ${{ secrets.ISSUELENS_SOURCE_READ_APP_CLIENT_ID }}
87-
private-key: ${{ secrets.ISSUELENS_SOURCE_READ_APP_PRIVATE_KEY }}
88-
owner: microsoft
89-
repositories: ${{ steps.selection.outputs.source-name }}
90-
permission-actions: read
91-
permission-contents: read
92-
permission-pull-requests: read
93-
9464
- name: Reconcile team memory and validate final receipts
9565
uses: microsoft/IssueLens/.github/actions/issuelens@a81d2d96167fc0e69ac631c2edc85f858e693289
9666
with:
9767
request-type: team-memory
9868
github-token: ${{ github.token }}
9969
source-repository: ${{ inputs.source_repository }}
10070
source-repositories: ${{ env.ISSUELENS_SOURCE_REPOSITORIES }}
101-
source-github-token: ${{ steps.selection.outputs.external == 'false' && github.token || steps.source-token.outputs.token }}
71+
source-github-token: ${{ github.token }}
10272
source-run-id: ${{ inputs.source_run_id }}
10373
source-run-attempt: ${{ inputs.source_run_attempt }}
10474
push-before: ${{ inputs.push_before }}

0 commit comments

Comments
 (0)