ci: add STS token retrieval step for label check#3824
Conversation
87c857c to
509509e
Compare
| @@ -1,7 +1,7 @@ | |||
| issuer: https://token.actions.githubusercontent.com | |||
There was a problem hiding this comment.
Intention was to remove this file and use the https://github.com/DataDog/dd-trace-go/blob/main/.github/chainguard/self.pr-static-checks.sts.yaml
I forgot to send the follow-up PR. This file is not used right now.
That being said, I'm not sure what the convention should be for creating these files.
I'm open to suggestions.
cc @darccio
There was a problem hiding this comment.
I switched the ref to self.pr-static-checks.sts.yaml to see if it works.
To do so we need to check the job_workflow_ref too. I don't know exactly how it works but i'm trying stuff.
There was a problem hiding this comment.
They won't work if the changes are not merged on the "main" unfortunately.
There was a problem hiding this comment.
Convention says to create a policy file for each usage.
f460ffd to
b54fa9e
Compare
e5d4fe3 to
e7906d8
Compare
|
/merge |
|
View all feedbacks in Devflow UI.
This merge request is not mergeable yet, because of pending checks/missing approvals. It will be added to the queue as soon as checks pass and/or get approvals.
The expected merge time in
|
What does this PR do?
The auto adding of labels is currently broken because of PAT deprecation. This PR fixes it.
The label was added by the automation when the PR included a, now reverted, contrib modification
Motivation
Reviewer's Checklist
./scripts/lint.shlocally.Unsure? Have a question? Request a review!