fix: drop PAT and auto-merge from Update README workflow - #3
Closed
bcastets-robotiq wants to merge 1 commit into
Closed
bcastets-robotiq wants to merge 1 commit into
bcastets-robotiq wants to merge 1 commit into
Conversation
No credential can make this workflow both author and approve its own PR without either a second bot identity (PAT) or a ruleset bypass that would exempt every GITHUB_TOKEN-authored PR in this repo from review, not just this one. Neither is worth it just to skip one daily click: GITHUB_TOKEN alone is enough to generate the content and open the PR: a human merges once the required test check passes. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
bcastets-robotiq
assigned
ebarnett3 and
mbegin-robotiq and unassigned
ebarnett3 and
mbegin-robotiq
Collaborator
Author
|
Closing — going with the ruleset bypass-actor approach instead of dropping auto-merge. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Simplifies
.github/workflows/update-readme.yml: removes theREADME_BOT_PATdependency and the approve/auto-merge step. The workflow still runs daily, still generates the content and opens a PR automatically — a human just merges it once thetestcheck passes, instead of it auto-merging.Why
No credential lets this workflow both author and approve its own PR without either a second bot identity (a PAT) or a ruleset bypass that would exempt every
GITHUB_TOKEN-authored PR in this repo from review, not just this one. Neither tradeoff is worth it to skip one daily click.GITHUB_TOKENalone is enough to generate content and open the PR.Test plan
workflow_dispatchand confirm it opens a PR without needing any secret🤖 Generated with Claude Code