[Feature Request] Distinguish GITHUB_TOKEN being used to create pull requests v.s. approve requests. #167994
Replies: 1 comment
-
|
💬 Your Product Feedback Has Been Submitted 🎉 Thank you for taking the time to share your insights with us! Your feedback is invaluable as we build a better GitHub experience for all our users. Here's what you can expect moving forward ⏩
Where to look to see what's shipping 👀
What you can do in the meantime 💻
As a member of the GitHub community, your participation is essential. While we can't promise that every suggestion will be implemented, we want to emphasize that your feedback is instrumental in guiding our decisions and priorities. Thank you once again for your contribution to making GitHub even better! We're grateful for your ongoing support and collaboration in shaping the future of our platform. ⭐ |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
Why are you starting this discussion?
Product Feedback
What GitHub Actions topic or product is this about?
Workflow Configuration
Discussion Details
It would be great if the GITHUB_TOKEN could be configured to create pull requests, but not approve them.
Currently, the setting is too coarse-grained (both create and approve), and understandably, some organizations (like mine) have disabled it at the organization level.
However, it makes sense for a bot to create pull requests—for example, to increment a release number or auto-generate documentation—while still requiring a human to perform the final approval.
I understand there may be concerns about pull request triggers causing loops, but since this setting now exists, I assume those concerns have already been addressed.
This is typically worked around by creating a PAT, but it's a shame to have to do that and a pain if a service account needs creating first.
Beta Was this translation helpful? Give feedback.
All reactions