How to allow Vercel deployments from wei/pull app?

[paddyroddy]

As per your suggestion, I'm using https://github.com/wei/pull to keep my fork up-to-date - thanks for the suggestion! However, I just tried, and a PR got made, but Vercel couldn't deploy for permissions reasons. I read that you need to add commit author to Vercel. Would this be the pull[bot], or in my case paddyroddy#3 qwerty541?

[qwerty541]

Hey, @paddyroddy! Thanks for your question! At first i should say that personally i don't use wei/pull application, preferring to deploy vercel instance manually pushing changes from repository clone on my local machine. And as far as I know, no one from the core team uses this. I looked at the available settings for the Vercel project and became interested in the "Deploy Hooks" feature. Looks like you can deploy selected branch by visiting specially generated link after merging pull requests created by wei/pull. I hope that it can be solution for your problem.

[paddyroddy]

But I think the current setting means It's now safe with disabling fork protection, as deployments will only get made on main

[rickstaa]

@paddyroddy deploying on the main branch should work out of the box. If you don't want to deploy on the pull request, you can simply ignore the warning or follow the answer here to disable builds on PRs.

[paddyroddy]

Yep, I've already done that here #3468 (reply in thread)

[qwerty541]

If I disable deployments from PRs, do you think that is safe with the above setting @qwerty541?

@paddyroddy When pull requests deployments are disabled, I don't see any vulnerabilities which can be caused by disabling git fork protection.

[paddyroddy]

Cheers!