mirror of
https://github.com/Comfy-Org/ComfyUI.git
synced 2026-08-05 18:05:08 +08:00
ci: use cloud-code-bot for the dispatch token
FEN_RELEASE_* are environment secrets on the 'backport release' environment, which is gated on required reviewers. A tag dispatch must not wait on a human approval, so that environment is not usable here. cloud-code-bot already authors the bump PRs on the cloud side, so its write access to Comfy-Org/cloud is established.
This commit is contained in:
12
.github/workflows/tag-dispatch-cloud.yml
vendored
12
.github/workflows/tag-dispatch-cloud.yml
vendored
@@ -22,10 +22,14 @@ jobs:
|
||||
id: app-token
|
||||
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1
|
||||
with:
|
||||
app-id: ${{ secrets.FEN_RELEASE_APP_ID }}
|
||||
private-key: ${{ secrets.FEN_RELEASE_PRIVATE_KEY }}
|
||||
# Cross-repo dispatch: without these the token is scoped to this
|
||||
# repository and the POST to cloud would 403.
|
||||
# cloud-code-bot is the same App the cloud receiver already runs on:
|
||||
# it authored the bump PRs, so its write access there is established
|
||||
# rather than assumed.
|
||||
app-id: ${{ vars.CLOUD_CODE_BOT_APP_ID }}
|
||||
private-key: ${{ secrets.CLOUD_CODE_BOT_PRIVATE_KEY }}
|
||||
# Cross-repo dispatch: create-github-app-token scopes to the current
|
||||
# repository by default, so the org installation must be named
|
||||
# explicitly or the POST to cloud would 403.
|
||||
owner: Comfy-Org
|
||||
repositories: cloud
|
||||
|
||||
|
||||
Reference in New Issue
Block a user