Problem
The commit author check has been changed to use the GITHUB_ACTOR environment variable instead of the commit author. This change is in the file trigger_action/trigger_action.py at lines 88-95.
Code Reference
The changed code is:
actor_login = os.environ.get("GITHUB_ACTOR", "").strip().lower()
if actor_login not in allowed_users:
print(f"Action performed by {actor_login}, not in allowed list. Skipping.")
exit(0)
Suggested Fix
No action required, this change seems to be a deliberate modification to the repository governance. However, it's worth reviewing the implications of using the GITHUB_ACTOR variable instead of the commit author.
Permalink
https://github.com/readme-SVG/Contribution-Painter/blob/b04e449089d081cb26a45ead8dc473ad1c030b01/trigger_action/trigger_action.py#L88
Generated from commit:b04e449 | Auto-detected role: security | Processed by actor: CommitAxis
Problem
The commit author check has been changed to use the GITHUB_ACTOR environment variable instead of the commit author. This change is in the file
trigger_action/trigger_action.pyat lines 88-95.Code Reference
The changed code is:
Suggested Fix
No action required, this change seems to be a deliberate modification to the repository governance. However, it's worth reviewing the implications of using the GITHUB_ACTOR variable instead of the commit author.
Permalink
https://github.com/readme-SVG/Contribution-Painter/blob/b04e449089d081cb26a45ead8dc473ad1c030b01/trigger_action/trigger_action.py#L88
Generated from commit:b04e449 | Auto-detected role:
security| Processed by actor: CommitAxis