search

bazelbuild / continuous-integration

Bazel's Continuous Integration Setup
https://buildkite.com
Apache License 2.0
258 stars 135 forks source link

Make google CLA check ignore github actions bot #1481

Open keith opened 1 year ago

keith commented 1 year ago

Probably not the right place for this, but not sure what other repo would be more appropriate. If you use github actions to create releases and do automatic version bumps, it fails the CLA check https://github.com/bazelbuild/apple_support/pull/145

cameron-martin commented 4 months ago

This is causing problems for vscode-bazel too. See https://github.com/bazelbuild/vscode-bazel/pull/360. I think we either need to get access to credentials for the @bazel-io bot or have the GitHub actions account not fail the CLA.

meteorcloudy commented 4 months ago

Google's internal policy says: "We will not grant the github-actions account CLA permission because it's a security risk." However, I don't think I can share credentials of bazel-io with non-googlers. There is a process to get an external bot CLA approval if Google deems it to be safe.