Skip to content

.github: Run PR label and title workflows on pull_request - #2003

Open
Michael Kubacki (makubacki) wants to merge 1 commit into
microsoft:release/202608from
makubacki:pull_request_target_workflows_2
Open

Michael Kubacki (makubacki) wants to merge 1 commit into
microsoft:release/202608from
makubacki:pull_request_target_workflows_2

Conversation

@makubacki

@makubacki Michael Kubacki (makubacki) commented Oct 28, 2026 •

Copy link
Copy Markdown
Member

Description

The label and PR formatting workflows used pull_request_target because they needed access to the GitHub App token.

They now run on pull_request (without secrets) and instead defer the operations that need write permission with the token to workflow_run triggered workflows.

  • Impacts functionality?
  • Impacts security?
  • Breaking change?
  • Includes tests?
  • Includes documentation?

How This Was Tested

Integration Instructions

  • N/A

@mu-automation

mu-automation Bot commented Oct 28, 2026 •

Copy link
Copy Markdown
Contributor

✅ QEMU Validation Passed

Source Dependencies

Repository Commit
mu_basecore 793ba62
mu_tiano_platforms 9a5b7f8

Results

Platform Target Build Boot Overall Boot Time Build Logs Boot Logs
Q35 DEBUG ✅ success ✅ success 0m 13s Build Logs Boot Logs
ArmVirt DEBUG ✅ success ✅ success 0m 17s Build Logs Boot Logs

Workflow run: https://github.com/microsoft/mu_basecore/actions/runs/40784990658

This comment was automatically generated by the Mu QEMU PR Validation workflow.

@codecov-commenter

Codecov Comments Bot (codecov-commenter) commented Oct 28, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (release/202608@003a16c). Learn more about missing BASE report.

Additional details and impacted files
@@                Coverage Diff                @@
##             release/202608    #2003   +/-   ##
=================================================
  Coverage                  ?    1.88%           
=================================================
  Files                     ?     1675           
  Lines                     ?   423774           
  Branches                  ?     5224           
=================================================
  Hits                      ?     7995           
  Misses                    ?   415599           
  Partials                  ?      180           
Flag Coverage Δ
FmpDevicePkg 5.11% <ø> (?)
MdeModulePkg 1.00% <ø> (?)
MdePkg 5.44% <ø> (?)
NetworkPkg 0.66% <ø> (?)
PolicyServicePkg 30.42% <ø> (?)
SecurityPkg 1.55% <ø> (?)
StandaloneMmPkg 0.50% <ø> (?)
UefiCpuPkg 4.70% <ø> (?)
UnitTestFrameworkPkg 11.70% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

The label and PR formatting workflows used `pull_request_target`
because they needed access to the GitHub App token.

They now run on `pull_request` (without secrets) and instead defer
the operations that need write permission with the token to
`workflow_run` triggered workflows.

Signed-off-by: Michael Kubacki <michael.kubacki@microsoft.com>
@makubacki
Michael Kubacki (makubacki) force-pushed the pull_request_target_workflows_2 branch from 204b12b to 793ba62 Compare October 28, 2026 22:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants