Assess use of external action peter-evans/create-pull-request in Mozilla's GitHub organization mozillasecurity
Categories
(mozilla.org :: Github: Administration, task)
Tracking
(Not tracked)
People
(Reporter: jkratzer, Assigned: cknowles, NeedInfo)
Details
I want to use the create-pull-request App/Action in MozillaSecurity for the following reasons:
We have several repositories that rely on static data that is routinely updated. This is currently handled via Taskcluster hooks but due to the removal of NPM classic tokens, we would like to move this to github workflow.
Below are my answers to your stock questions:
** Which repositories do you want to have access? (all or list)
https://github.com/MozillaSecurity/gridl/
https://github.com/MozillaSecurity/gr.css.reports
** Are any of those repositories private?
Both are private.
** Provide link to vendor's description of permissions needed and why, or general documentation link for either the app or action
https://github.com/marketplace/actions/create-pull-request
|
Assignee | |
Comment 1•1 day ago
|
||
updated title to better reflect the request for the peter-evans/create-pull-request action to be enabled in the mozillasecurity org.
verified that this action is not in the list of pre-approved actions - and thus referring to security to review and ask questions.
Clovis/Sandeep - questions/comments/approvals?
@jkratzer does this action also include "Auto-merge" functionality? Is there any way to disable that feature?
Description
•