Skip to content

[MEDIUM] Changed commit author check to use GITHUB_ACTOR environment variable #46

@github-actions

Description

@github-actions

Problem

The commit author check has been changed to use the GITHUB_ACTOR environment variable instead of the commit author. This change is in the file trigger_action/trigger_action.py at lines 88-95.

Code Reference

The changed code is:

actor_login = os.environ.get("GITHUB_ACTOR", "").strip().lower()
if actor_login not in allowed_users:
    print(f"Action performed by {actor_login}, not in allowed list. Skipping.")
    exit(0)

Suggested Fix

No action required, this change seems to be a deliberate modification to the repository governance. However, it's worth reviewing the implications of using the GITHUB_ACTOR variable instead of the commit author.

Permalink

https://github.com/readme-SVG/Contribution-Painter/blob/b04e449089d081cb26a45ead8dc473ad1c030b01/trigger_action/trigger_action.py#L88


Generated from commit:b04e449 | Auto-detected role: security | Processed by actor: CommitAxis

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions