MetaMask / MetaMask/metamask-extension
Rename LAVAMOAT_UPDATE_TOKEN to a more generic name
- Dominant language
- TypeScript
- Stars
- 13.2k
- Forks
- 5.6k
- Avg merge
- 2d 5h
- Merged PRs (30d)
- 451
Description
### What is this about?
We are currently using `LAVAMOAT_UPDATE_TOKEN` in two workflows: [Update LavaMoat policies](https://github.com/MetaMask/metamask-extension/blob/develop/.github/workflows/update-lavamoat-policies.yml) and [Update Attributions](https://github.com/MetaMask/metamask-extension/blob/develop/.github/workflows/update-attributions.yml). This token should be renamed to a more generic name that does not include the LavaMoat keyword.
### Scenario
_No response_
### Design
_No response_
### Technical Details
_No response_
### Threat Modeling Framework
_No response_
### Acceptance Criteria
_No response_
### Stakeholder review needed before the work gets merged
- [X] Engineering (needed in most cases)
- [ ] Design
- [ ] Product
- [ ] QA (automation tests are required to pass before merging PRs but not all changes are covered by automation tests - please review if QA is needed beyond automation tests)
- [X] Security
- [ ] Legal
- [ ] Marketing
- [ ] Management (please specify)
- [ ] Other (please specify)
### References
_No response_
Contributor guide
Research direction
Start by inspecting .github/workflows/update-lavamoat-policies.yml and .github/workflows/update-attributions.yml, then search the repository for LAVAMOAT_UPDATE_TOKEN. Rename the shared token consistently in both workflows and related configuration, with no remaining references to the old name.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions
- Domain
- ci-cd
- Issue type
- Refactor
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100