From b57367020abc53f6e757b9eaadfe96ae7cf7e695 Mon Sep 17 00:00:00 2001 From: Kevin Parsons Date: Tue, 3 Jan 2023 15:45:49 -0800 Subject: [PATCH] CI: Pass GITHUB_TOKEN to containerd/project-checks Previously the project-checks action was failing sometimes due to hitting GitHub API rate limits. Since no token was supplied, the rate limits were only 60 requests/hour keyed off the IP address of the runner. Now, passing GITHUB_TOKEN secret through to project-checks, we have a limit of 1000 requests/hour for the whole repo. This should alleviate the rate limits that were being seen. I believe it is safe to pass this secret as project-checks is also owned by the containerd organization. The secret is also scoped to the actions run, and is invalidated upon completion. project-checks version is also updated to the version that supports repo-access-token input. Signed-off-by: Kevin Parsons (cherry picked from commit 79d09c69b4e4799e35b1d97718ab70351fe82164) Signed-off-by: Derek McGowan --- .github/workflows/ci.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d66dd5b87727..71d9062fb4fa 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -63,9 +63,10 @@ jobs: path: src/github.com/containerd/containerd fetch-depth: 100 - - uses: containerd/project-checks@v1 + - uses: containerd/project-checks@v1.1.0 with: working-directory: src/github.com/containerd/containerd + repo-access-token: ${{ secrets.GITHUB_TOKEN }} - name: verify go modules and vendor directory run: |