-
Notifications
You must be signed in to change notification settings - Fork 142
ci: replace forked GH action with latest upstream #127
Conversation
I don't remember the full context of the impetus, but I believe the fork was also there so folks could "trust" the GitHub Action in question since it was coming from HashiCorp and not a third-party, since its dealing with sensitive information. |
In regard to https://github.com/hashicorp/terraform-provider-scaffolding/blob/main/.github/workflows/add-content-to-project.yml it's intentional: it should add any incoming PR/issue to all TF DevEx team, to our internal project. Though I'm noticing, this thing hasn't triggered with you here. There might be an issue with it: I'll look into it. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good to me, per hashicorp/ghaction-import-gpg#11 🚀
Hashicorp's ghaction-import-gpg has been deprecated in favour of this action - additionally their action has a bug which they are not intending on fixing and recommend people switch. Reference: hashicorp/terraform-provider-scaffolding#127 Reference: hashicorp/ghaction-import-gpg#11
Hashicorp's ghaction-import-gpg has been deprecated in favour of this action - additionally their action has a bug which they are not intending on fixing and recommend people switch. Reference: hashicorp/terraform-provider-scaffolding#127 Reference: hashicorp/ghaction-import-gpg#11
The main blocker and reason for the fork (support of subkeys) seems to be resolved now:
crazy-max/ghaction-import-gpg#58
Unrelated: I noticed this action also, which doesn't seem relevant for this repo - was that perhaps accidentally copied from somewhere else?