From cbba7ec05c373315de2f1593dd38c909890bb1be Mon Sep 17 00:00:00 2001 From: Andreas Dangel Date: Fri, 15 Oct 2021 22:34:49 +0200 Subject: [PATCH] Revert "[ci] Remove DANGER_GITHUB_API_TOKEN" This reverts commit 23e5e2d8b478133fec4149d9bd0e7d35c0335640. We still need a separate token for danger. --- .ci/README.md | 5 +++++ .ci/files/public-env.gpg | 19 +++++++++++-------- 2 files changed, 16 insertions(+), 8 deletions(-) diff --git a/.ci/README.md b/.ci/README.md index a9939c0523..87250d6ba7 100644 --- a/.ci/README.md +++ b/.ci/README.md @@ -7,6 +7,11 @@ It uses the common scripts from [build-tools](https://github.com/pmd/build-tools This files contains the following environment variables: +* DANGER_GITHUB_API_TOKEN: Token for danger to add comments to PRs as . + The token needs the scope "public_repo". Note: The default GITHUB_TOKEN can't be used, because + danger runs in pull request builds from fork and the default GITHUB_TOKEN has read-only access there + and can't write comments. Therefore the personal access token of the bot account "pmd-test" is used. + pmd-test has no commit permissions, but can comment on any public repo, including pmd/pmd. * PMD_CI_CHUNK_TOKEN: Token for uploading reports to chunk.io The file is encrypted, so that the tokens are not automatically disabled when github detects them diff --git a/.ci/files/public-env.gpg b/.ci/files/public-env.gpg index 3cf1f60ad1..93404c7646 100644 --- a/.ci/files/public-env.gpg +++ b/.ci/files/public-env.gpg @@ -1,11 +1,14 @@ -----BEGIN PGP MESSAGE----- -jA0ECQMCMvDDP12HX9n/0sBqAQo9gWGlWW/NwGuLvOhyujxi1TToPHCYbxMnp+w7 -NFA/jRRpt8ou1pOqtaTBlHsF/KidwbyZ5H9yexvnUZ1yIaUMD0KxU5OiT5B4yeg0 -CEVaF1F6WneoHH4NHNKJ29EUdoKU4kaVEIHQXbN8M1c+DXyOiLOFUMQR3r75coEh -NfHFa6O2gZT6l1YXmiDi8M5igtSE/l3qYvqGfKqwYSRRSkfmI5s9nfMeqvf57e8Q -NSXp9a1T3I6bX53jZW5BkZYMR+9Xk9bVisxJdlohq1xpUopUePl3LtddqMp8OKm4 -6CL+e/5HJ7A6E7K3LgH7C4sj2l73YxwQMuDGEUeM/dABCHd7DIGYXNe11PNle7+K -Dpm8kpARjTAmYZpDjH60qNxvgufqMid3MEal2A== -=ntcd +jA0ECQMC6NJFOgCtLK790sDsAV7zf22dX5W7Ki3LdPBesQvoN+fU5xjNcu9ytrOQ +pNDQybzmGkBU7gJM5sasTEv2OKp7h+nt8xSfaE8u0i4G0+yLGZKxbCrZoHnoBiaW +udpjvvxyKdEV8wn1DPsh/W9ARmxdJezpreUwmwExamYiVEXsWOr2DWST+DPVX+4I +5vAxi/YqO1/Pn+s/wIOKM/57otuVxwzwyUFxItJF4GV3NeCKt1cDQHRT1OSn2Mlw +1LY8oUJgjKVCzI9F7xSlHYRYtvUK2icc7lvwrUliXIlcVetUB6Swe5AJmtmQ63y0 +EU52Uh7VPYjj929QgpoVpJHGTJl/Omyk63nb1EOrDWEVUMzg4fDsbAsmzvPyD/FR +R6S9OeJUCsLMXlu7MRHCQi0vDk3li25pVqJmFm9Ahk8tkY/yzgQLoWmVEOhl8xDY +oEQh0XNy9TxvzRzYlutYdU7K4ACohNsJN/MpKkRVzA3aMIBrNjVGa0dF8kd+7grg +fJ+MW8skcpIHDegDcxVAs+O4r9VO3UDAcx3E/kgdLAKSOV0sRt4ZbJZaML7sKkSV +muTtIhHzGwB41qKichY= +=fgy5 -----END PGP MESSAGE-----