Skip to content

Add notes about naming of personal tokens to "Hack for LA's GitHub Actions" Wiki page #4790

@t-will-gillis

Description

@t-will-gillis

Overview

As developers testing GitHub Actions, we want to be sure that the tests we run are contained to our own repos, and do not cause unexpected changes to the Hack for LA environment. When generating personal access tokens for testing GHAs, developers need to follow best practices to mitigate these effects.

Action Items

Now, when you are testing the GitHub Action in your own Project Board, you will replace `secrets.HACKFORLA_BOT_PA_TOKEN` with `secrets.[your new token]`. Once you are satisfied with the changes in your own system, change it back to `secrets.HACKFORLA_BOT_PA_TOKEN` before making your pull request so that token for the HfLA Project Board is not pointing to a secret that doesn't exist. 

with:

In the box "Secret*", paste the token code that you saved in step 5.  

In the box "Name*", enter a name for your token, for example  `MY-TEST-TOKEN`. **Important note**: Do NOT give your token the same name that you see in the yml file- **you must change it** to avoid unexpected behavior. Now, when you are testing the GitHub Action in your own Project Board, you will replace `secrets.HACKFORLA_BOT_PA_TOKEN` with 'secrets.' + the name of your token, for example `secrets.MY-TEST-TOKEN`. Once you are satisfied with the tests in your own system, change the token name back to `secrets.HACKFORLA_BOT_PA_TOKEN` before making your pull request so that token for the HfLA Project Board is not pointing to a secret that doesn't exist. 
  • Follow the instructions for including the edited content as explained in Editing a Wiki page.

Resources/Instructions

Metadata

Metadata

Assignees

Type

No type

Projects

Status

Done

Relationships

None yet

Development

No branches or pull requests

Issue actions