From 5a635b64c98b75a3f75929f255c1f1994276af0b Mon Sep 17 00:00:00 2001 From: Tricia Jenkins Date: Fri, 7 May 2021 16:03:16 -0600 Subject: [PATCH 1/2] Use read-only token for Danger Starting March 1st, 2021 workflow runs that are triggered by Dependabot from push, pull_request, pull_request_review, or pull_request_review_comment events will be treated as if they were opened from a repository fork. This means they will receive a read-only GITHUB_TOKEN and will not have access to any secrets available in the repository. --- .github/workflows/push.yml | 4 ++-- CHANGELOG.md | 1 + 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml index 9be9bb77f..024b129a2 100644 --- a/.github/workflows/push.yml +++ b/.github/workflows/push.yml @@ -35,10 +35,10 @@ jobs: bundle config path vendor/bundle bundle config set without 'production development' bundle install --jobs 4 --retry 3 - + - name: Run Danger env: - DANGER_GITHUB_API_TOKEN: ${{ secrets.DANGER_GITHUB_API_TOKEN }} + DANGER_GITHUB_API_TOKEN: ${{ secrets.GITHUB_TOKEN }} run: bundle exec danger - name: Lint with RuboCop diff --git a/CHANGELOG.md b/CHANGELOG.md index ae85184c2..afa5c78d2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -70,6 +70,7 @@ Further discussion of the context can be found at [#2119](https://github.com/ual - bump rubocop and fix more cop violations [PR#2132](https://github.com/ualbertalib/jupiter/pull/2132) - Fix error when parsing n3 files which include objects with elements as values. - Corrected missing pluralization in Digitization::Book attributes +- Danger token in Github Actions [#2282](https://github.com/ualbertalib/jupiter/issues/2282) ## [2.0.2] - 2020-12-17 - Enable Skylight in the Staging environment and remove it from the UAT environment (where it was unused, and the performance of the Docker environment is less likely to be similar to Production) From 947372a902a5e1fe517b2b7406d170ada14e1e8c Mon Sep 17 00:00:00 2001 From: Tricia Jenkins Date: Mon, 10 May 2021 10:57:51 -0600 Subject: [PATCH 2/2] try to trigger Danger commit message Trying to trigger a Danger response to prove that this might work as a solution. --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index afa5c78d2..ca1215e5e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -70,7 +70,7 @@ Further discussion of the context can be found at [#2119](https://github.com/ual - bump rubocop and fix more cop violations [PR#2132](https://github.com/ualbertalib/jupiter/pull/2132) - Fix error when parsing n3 files which include objects with elements as values. - Corrected missing pluralization in Digitization::Book attributes -- Danger token in Github Actions [#2282](https://github.com/ualbertalib/jupiter/issues/2282) +- Danger ## [2.0.2] - 2020-12-17 - Enable Skylight in the Staging environment and remove it from the UAT environment (where it was unused, and the performance of the Docker environment is less likely to be similar to Production)