GitHub announces commits to the private security repo on Discord
Categories
(Bugzilla :: bugzilla.org, task)
Tracking
()
People
(Reporter: justdave, Unassigned)
Details
The Bugzilla GitHub organization has a webhook set up to announce commits on Discord.
Unfortunately, it even includes private repos, so commits to the security repo are also included. Fortunately so far that's only been merge commits, but we need to fix this before we commit anything real since it gets posted to a public channel.
Other than upvoting https://github.com/community/community/discussions/36180 there doesn't seem to be anything we can do besides removing the organization-wide webhook and putting repository-specific webhooks on EVERY SINGLE REPOSITORY except for security... (there are 50 of them)
|
Reporter | |
Comment 1•2 years ago
|
||
GitHub is currently pointed at Discord's built-in webhook for GitHub, which has almost zero configuration just like the sender on GitHub itself.
There do appear to be one or more open source Discord bots that can accept webhooks from GitHub, though, and I'm guessing we can probably easily modify one of those to filter out events from the security repo and use it instead of the built-in one.
|
|
Reporter | |
Comment 2•2 years ago
|
||
This one looks good: https://github.com/Nicolas-Reyland/Git-Observer
|
|
Reporter | |
Comment 3•1 years ago
|
||
Oh, I forgot to resolve this. This is fixed and live now. Ended up writing my own.
Description
•