Create tags with bot account
Closed this issue · 5 comments
Done Criteria
Lotus release automation uses a bot to create the tag
Why Important
Not that important, but it causes confusion when a release goes out and @galargh's name is tied to it (latest example).
User/Customer
Mostly this is for maintainers
Notes
- This happens because CI uses @galargh token because we have protection rules on tag creation and we can only allow-list actual users, not apps.
- The secret we need to update is
TAG_CREATE_GITHUB_TOKEN
- We need a bot account with these permissions:
@rjan90 : I can take this unless you have already started on it. I would do the tasks listed in the issue description.
Cc @jennijuju since you were asking about this recently.
If you have any further questions about this, please let me know :)
@FilOzzy lives: https://github.com/FilOzzy
Added to filecoin-project: filecoin-project/github-mgmt#96
Created PAT matching screenshot above:
https://github.com/settings/personal-access-tokens
Updated TAG_CREATE_GITHUB_TOKEN
:
https://github.com/filecoin-project/lotus/settings/secrets/actions
I'm marking this as resolved since all known steps are complete. We'll find out in the next Lotus release whether I messed anything up by looking at #fil-lotus-announcements during the next release.
Also, for visibility, the FilOzzy GitHub credentials are in FilOz's Infra 1password vault.