search

onekey-sec / unblob

Extract files from any kind of container formats
https://unblob.org
Other
2.14k stars 81 forks source link

CI: dependabot can't push to docker registry #705

Closed qkaiser closed 7 months ago

qkaiser commented 7 months ago

If you take a look at https://github.com/onekey-sec/unblob/pull/703, you'll see that the docker container build fails because we receive a 403 when trying to push to the registry.

It's due to the way Github set permissions. If a pull request is created by a member that's not part ot the organization, then it should not have a token with write access permissions to the repo and registries.

There is detailed documentation about this here:

We should adapt our Github workflow so that trusted users like Github dependabot can work.

qkaiser commented 7 months ago

Once this is taken care of, we can define a dependabot configuration file at https://github.com/onekey-sec/unblob/network/updates so that we receive weekly updates for dependencies.

qkaiser commented 7 months ago

Fixed by https://github.com/onekey-sec/unblob/pull/708