MetaMask / MetaMask/metamask-extension

Rename LAVAMOAT_UPDATE_TOKEN to a more generic name

Open
#25,737 0 comments 0 reactions 0 assignees View on GitHub
team-core-platform
Dominant language
TypeScript
Stars
13.2k
Forks
5.6k
Avg merge
2d 5h
Merged PRs (30d)
451

Description

### What is this about?

We are currently using `LAVAMOAT_UPDATE_TOKEN` in two workflows: [Update LavaMoat policies](https://github.com/MetaMask/metamask-extension/blob/develop/.github/workflows/update-lavamoat-policies.yml) and [Update Attributions](https://github.com/MetaMask/metamask-extension/blob/develop/.github/workflows/update-attributions.yml). This token should be renamed to a more generic name that does not include the LavaMoat keyword.

### Scenario

_No response_

### Design

_No response_

### Technical Details

_No response_

### Threat Modeling Framework

_No response_

### Acceptance Criteria

_No response_

### Stakeholder review needed before the work gets merged

- [X] Engineering (needed in most cases)
- [ ] Design
- [ ] Product
- [ ] QA (automation tests are required to pass before merging PRs but not all changes are covered by automation tests - please review if QA is needed beyond automation tests)
- [X] Security
- [ ] Legal
- [ ] Marketing
- [ ] Management (please specify)
- [ ] Other (please specify)

### References

_No response_

Contributor guide

Open the contributing guide

Research direction

Start by inspecting .github/workflows/update-lavamoat-policies.yml and .github/workflows/update-attributions.yml, then search the repository for LAVAMOAT_UPDATE_TOKEN. Rename the shared token consistently in both workflows and related configuration, with no remaining references to the old name.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions
Domain
ci-cd
Issue type
Refactor
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.