-
Notifications
You must be signed in to change notification settings - Fork 131
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
updating the approval requirement #3148
Conversation
Signed-off-by: Dhrubo Saha <[email protected]>
@@ -29,7 +29,7 @@ jobs: | |||
# Handle Pull Request events | |||
|
|||
# Check if the PR is triggered by opensearch-trigger-bot | |||
if [[ "$github_event" == "pull_request" ]] && [[ "$author" == "opensearch-trigger-bot[bot]" ]]; then | |||
if [[ "$author" == "opensearch-trigger-bot[bot]" ]]; then |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Just curious, this author opensearch-trigger-bot[bot]
should be some Github unique user ID , right ? Is it possible someone else bypass with same name?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
the opensearch-trigger-bot[bot] is a unique bot account managed by GitHub, and its identity is authenticated by GitHub's infrastructure. Regular users cannot impersonate it or spoof its actions by just creating an account with a similar name.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good to me
Signed-off-by: Dhrubo Saha <[email protected]> (cherry picked from commit c195fd6)
Signed-off-by: Dhrubo Saha <[email protected]> (cherry picked from commit c195fd6) Co-authored-by: Dhrubo Saha <[email protected]>
Description
[updating the approval requirement so that it can trigger always for opensearch-trigger-bot[bot]]
Related Issues
Resolves #[Issue number to be closed when this PR is merged]
Check List
--signoff
.By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.