damccorm opened a new pull request, #40375:
URL: https://github.com/apache/beam/pull/40375

   Part 4 of 4 migrating CI workflows from `pull_request_target` to 
`pull_request`.
   
   ### Summary
   - Migrates the 25 workflows (6 PreCommit and 19 PostCommit/benchmark 
workflows) that reference repository secrets other than Gradle 
Enterprise/Develocity cache keys and `GITHUB_TOKEN`:
     - `GCP_SA_EMAIL` / `GCP_SA_KEY` (5 workflows)
     - `ALLOYDB_PASSWORD` (6 workflows)
     - `HF_INFERENCE_TOKEN` (2 workflows)
     - `INFLUXDB_USER` / `INFLUXDB_USER_PASSWORD` (12 workflows)
   - Guards check-run creation on fork PRs where `GITHUB_TOKEN` is read-only.
   
   ### Related PRs
   - Part 1 (5 pilot workflows): #40360
   - Part 2 (PreCommit workflows without extra secrets): #40372
   - Part 3 (PostCommit workflows without extra secrets): #40373
   - Comment-only cleanup: #40371


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to