From 4b4073ba2de2b6b031f565659481d402b869693a Mon Sep 17 00:00:00 2001 From: mayankdev-oss Date: Tue, 23 Jun 2026 09:15:35 +0530 Subject: [PATCH 1/2] ci: replace secrets inherit with explicit token mapping for chatops --- .github/workflows/chatops-retest.yml | 6 ++---- .github/workflows/slash.yml | 10 ++++------ 2 files changed, 6 insertions(+), 10 deletions(-) diff --git a/.github/workflows/chatops-retest.yml b/.github/workflows/chatops-retest.yml index a4e1858ab..3038b4c9e 100644 --- a/.github/workflows/chatops-retest.yml +++ b/.github/workflows/chatops-retest.yml @@ -1,14 +1,12 @@ name: Rerun Failed Actions - permissions: contents: read - on: repository_dispatch: types: [retest-command] - jobs: retest: name: Rerun Failed Actions uses: tektoncd/plumbing/.github/workflows/_chatops_retest.yml@48c53b4e7f1e0bb206575b80eb9fcf07b5854907 # main - secrets: inherit + secrets: + CHATOPS_TOKEN: ${{ secrets.CHATOPS_TOKEN }} \ No newline at end of file diff --git a/.github/workflows/slash.yml b/.github/workflows/slash.yml index e7397d6d7..8a6f74c2d 100644 --- a/.github/workflows/slash.yml +++ b/.github/workflows/slash.yml @@ -1,17 +1,15 @@ name: Slash Command Routing - permissions: contents: read - on: issue_comment: types: [created] - jobs: check_comments: if: ${{ github.event.issue.pull_request }} permissions: - issues: write # for peter-evans/slash-command-dispatch to create issue reaction - pull-requests: write # for peter-evans/slash-command-dispatch to create PR reaction + issues: write + pull-requests: write uses: tektoncd/plumbing/.github/workflows/_slash.yml@5fcd73e7a60655e2cc717015e91be844523ab8f1 # main - secrets: inherit + secrets: + CHATOPS_TOKEN: ${{ secrets.CHATOPS_TOKEN }} \ No newline at end of file From c728e7b67d628ada3948ffc11273385845b8aa69 Mon Sep 17 00:00:00 2001 From: mayankdev-oss Date: Wed, 24 Jun 2026 15:10:12 +0530 Subject: [PATCH 2/2] fix: add newline at end of file --- .github/workflows/chatops-retest.yml | 2 +- .github/workflows/slash.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/chatops-retest.yml b/.github/workflows/chatops-retest.yml index 3038b4c9e..cb5d2bb21 100644 --- a/.github/workflows/chatops-retest.yml +++ b/.github/workflows/chatops-retest.yml @@ -9,4 +9,4 @@ jobs: name: Rerun Failed Actions uses: tektoncd/plumbing/.github/workflows/_chatops_retest.yml@48c53b4e7f1e0bb206575b80eb9fcf07b5854907 # main secrets: - CHATOPS_TOKEN: ${{ secrets.CHATOPS_TOKEN }} \ No newline at end of file + CHATOPS_TOKEN: ${{ secrets.CHATOPS_TOKEN }} diff --git a/.github/workflows/slash.yml b/.github/workflows/slash.yml index 8a6f74c2d..fd85ab5c4 100644 --- a/.github/workflows/slash.yml +++ b/.github/workflows/slash.yml @@ -12,4 +12,4 @@ jobs: pull-requests: write uses: tektoncd/plumbing/.github/workflows/_slash.yml@5fcd73e7a60655e2cc717015e91be844523ab8f1 # main secrets: - CHATOPS_TOKEN: ${{ secrets.CHATOPS_TOKEN }} \ No newline at end of file + CHATOPS_TOKEN: ${{ secrets.CHATOPS_TOKEN }}