adobe / adobe/cla-bot

Look into github action to push PRs from forks to origin on review approval

Open
#80 0 comments 0 reactions 0 assignees View on GitHub
enhancement help wanted infrastructure question
Dominant language
JavaScript
Stars
7
Forks
11
PR merge metrics
No merged PRs in 30d

Description

Since the full integration test suite in this repo relies on sensitive keys, we cannot trust pull requests from branches not on this repo's origin. Someone could do something malicious with those keys. As such, for legit, non-malicious and well intentioned folks sending PRs to this repo, after reviewing the code, I have to push their code to a branch on this origin in order to trigger the full integration test suite.

Would be cool to automate this song-n-dance.

Could base it on something from here? https://github.com/sdras/awesome-actions#pull-requests

Contributor guide

Open the contributing guide

Research direction

The issue names no repository files or tests; start by reviewing the linked awesome-actions pull-request examples and the repository's full integration-test setup. Done means automating the approved fork-PR flow onto an origin branch so the full suite can run without exposing sensitive keys.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions, javascript
Domain
ci-cd
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.