Revert PAT for merge-dependabot-pr
Dependabot does not see GH secrets: https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions#responding-to-events
This commit is contained in:
5
.github/workflows/merge-dependabot-pr.yml
vendored
5
.github/workflows/merge-dependabot-pr.yml
vendored
@@ -9,7 +9,6 @@ run-name: Merge Dependabot PR ${{ github.ref_name }}
|
||||
|
||||
jobs:
|
||||
merge-dependabot-pr:
|
||||
|
||||
permissions: write-all
|
||||
uses: spring-io/spring-github-workflows/.github/workflows/spring-merge-dependabot-pr.yml@main
|
||||
secrets:
|
||||
GH_ACTIONS_REPO_TOKEN: ${{ secrets.GH_ACTIONS_REPO_TOKEN }}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user