Create an automation GitHub App for actions
还没有人认领这个 Issue。
评估
- 难度
- 5/5
- 预计耗时
- 一周以上
- 新手友好度
- 30/100
调研方向
从 admin 仓库中的 request-an-access-token.md 以及链接的 GitHub App 身份验证文档开始。检查提议的权限和授予 repository 访问权限的流程，包括 release-please 的示例工作流。完成的标准是：存在一个受组织限制的 GitHub App，并具有所述权限；访问 repository 需要提交 admin 请求；注册流程已编写文档。
由索引模型根据 Issue 内容生成。
描述
To automate common workflows like release-please and dependency updaters, a personal access token or a github app installation token is required to trigger subsequent GitHub Action workflows.
When you use the repository's GITHUB_TOKEN to perform tasks, events triggered by the GITHUB_TOKEN will not create a new workflow run. This prevents you from accidentally creating recursive workflow runs.
https://docs.github.com/en/actions/writing-workflows/choosing-when-your-workflow-runs/triggering-a-workflow#triggering-a-workflow-from-a-workflow
However, GitHub does not allow creating PAT via API. This makes it awkward to automate token creation.
I propose creating a GitHub App in the @nodejs organization with the following permissions:
contents: writeandpull-requests: write(permissions to create tags and pull requests, requested by release-please and for dependency updaters),- This GitHub App needs explicit granting to specific repositories, via explicit requests in the admin repo,
- Only allow this GitHub App to be installed on the @nodejs account.
With this new GitHub app, new github action workflows can follow https://docs.github.com/en/apps/creating-github-apps/authenticating-with-a-github-app/making-authenticated-api-requests-with-a-github-app-in-a-github-actions-workflow to automate the token authentication. (example)
Granting the app to a repository still needs registering in this admin repo for awareness.
This is only for common workflows. Requesting permissions for customized workflows that need additional permissions should still follow the steps in https://github.com/nodejs/admin/blob/main/request-an-access-token.md.
- 主要语言
- JavaScript
- 星标
- 202
- 派生
- 183
- 平均合并
- 13 天 12 小时
- 30 天内合并 PR
- 2
贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
nodejs/admin 的其他 Issue
-
难度 1/5 1 小时以内 新手友好度 90/100
-
tsc-agenda
难度 5/5 一周以上 新手友好度 30/100
-
难度 5/5 一周以上 新手友好度 35/100
-
难度 5/5 一周以上 新手友好度 35/100
-
难度 5/5 一周以上 新手友好度 30/100
相似的 Issue
-
难度 2/5 1-3 小时 新手友好度 82/100
-
area-deployment area-integrations triage:bot-seen
难度 2/5 半天 新手友好度 86/100
-
Issue-Bug
难度 2/5 1-3 小时 新手友好度 68/100
sugarlabs/musicblocks#8924 ·
-
难度 1/5 1 小时以内 新手友好度 90/100
ArduPilot/ardupilot_wiki#8088 ·
-
[BUG] createTool tools cannot be registered with Mastra when exactOptionalPropertyTypes is enabled 未关闭customer-eng status: needs triage
难度 2/5 1-3 小时 新手友好度 84/100