status-app icon indicating copy to clipboard operation
status-app copied to clipboard

Update to actions-riff-raff@v4

Open emdash-ie opened this issue 1 year ago • 5 comments

Saw a recent email from DevX about upgrading, figured I’d do it quickly. Version 4 means we can get rid of the AWS credentials step and leaves us less vulnerable to credentials access by malicious dependencies

See the release notes for version 4 and those for version 3 (the latter necessary because we’re coming from version 2.)

(Have also committed auto-formatting done by my editor)

emdash-ie avatar Feb 20 '24 14:02 emdash-ie

Ah, I got confused: I thought we (Content Pipeline) owned this repository, but actually I don’t believe we do!

emdash-ie avatar Feb 21 '24 16:02 emdash-ie

I think the repository is owned by @guardian/ophan, but I can’t request a review from that team for some reason. Maybe this is the same reason the codeowners file in this repo is flagged by Github as invalid?

emdash-ie avatar Feb 21 '24 16:02 emdash-ie

I've added the Ophan team as an Admin of this repo at https://github.com/guardian/status-app/settings/access, I hope this helps!

rtyley avatar Feb 21 '24 16:02 rtyley

I've added the Ophan team as an Admin of this repo at https://github.com/guardian/status-app/settings/access, I hope this helps!

Ah yes, that seems to have fixed it :) Thanks!

emdash-ie avatar Feb 21 '24 16:02 emdash-ie