-
Notifications
You must be signed in to change notification settings - Fork 1
Description
We currently use @tools-bot in some of our actions via the TOOLS_BOT_PAK
secret. We should be able to mostly replace it with GITHUB_TOKEN
(see the docs), but there's at least one area where we still need tools-bot
:
We need to bypass the PR requirement when merging back into develop
after release. We do that by adding the @ASFHyP3/automation team (of which tools-bot
is a member) to the Allow specified actors to bypass required pull requests
list in the branch protection rule for develop
. From reading https://github.com/orgs/community/discussions/13836 it doesn't sound like there's a way to do that for the default github-actions
app. You'd need to create your own custom app, which isn't much better than creating your own PAK.
If we could find a way around this and get rid of tools-bot
, we could also simplify https://github.com/ASFHyP3/hyp3-cookiecutter.