Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update to organization-scope Personal Access Token #1599

Merged
merged 1 commit into from
Jan 15, 2024
Merged

Conversation

Zeitsperre
Copy link
Collaborator

@Zeitsperre Zeitsperre commented Jan 15, 2024

Pull Request Checklist:

  • This PR addresses an already opened issue (for bug fixes / features)
    • This PR fixes #xyz
  • Tests for the changes have been added (for bug fixes / features)
    • (If applicable) Documentation has been added / updated (for bug fixes / features)
  • CHANGES.rst has been updated (with summary of main changes)
    • Link to issue (:issue:number) and pull request (:pull:number) has been added

What kind of change does this PR introduce?

  • Updates Workflows to use Organization-scoped Personal Access Tokens

Does this PR introduce a breaking change?

No.

Other information:

The ACTIONS_VERSIONS_UPDATER_TOKEN and the BUMP_VERSION_TOKEN are Organization-scoped (Ouranosinc) personal access tokens with the following permissions for repositories xclim, xscen, miranda, figanos, and raven-hydro:

ACTIONS_VERSIONS_UPDATER_TOKEN:

  • Contents: Read and Write
  • Metadata: Read-Only
  • Pull Requests: Read and Write
  • Workflows: Read and Write

BUMP_VERSION_TOKEN:

  • Contents: Read and Write
  • Metadata: Read-Only
  • Pull Requests: Read and Write

Both are set to expire on January 1st, 2025. After this point, anyone with maintainer access can generate new tokens and ask the Ouranosinc admins to update the tokens so that workflows continue operating as normal.

For more information: https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens

@Zeitsperre Zeitsperre added the standards / conventions Suggestions on ways forward label Jan 15, 2024
@Zeitsperre Zeitsperre added this to the v0.48.0 milestone Jan 15, 2024
@Zeitsperre Zeitsperre requested a review from a team January 15, 2024 21:05
@Zeitsperre Zeitsperre self-assigned this Jan 15, 2024
@github-actions github-actions bot added the CI Automation and Contiunous Integration label Jan 15, 2024
@Zeitsperre
Copy link
Collaborator Author

@aulemahal This needs to merge before any other PR (existing tokens have been modified)

@github-actions github-actions bot added the approved Approved for additional tests label Jan 15, 2024
@Zeitsperre Zeitsperre merged commit b0b4ba8 into master Jan 15, 2024
26 checks passed
@Zeitsperre Zeitsperre deleted the new-PAT branch January 15, 2024 22:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Approved for additional tests CI Automation and Contiunous Integration standards / conventions Suggestions on ways forward
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants