Skip to content

fix(bazel-bot): replace gh and jq dependencies#6248

Open
sofisl wants to merge 1 commit into
mainfrom
fix-bb-vulnerability
Open

fix(bazel-bot): replace gh and jq dependencies#6248
sofisl wants to merge 1 commit into
mainfrom
fix-bb-vulnerability

Conversation

@sofisl

@sofisl sofisl commented Jun 12, 2026

Copy link
Copy Markdown
Contributor

@sofisl sofisl requested a review from a team as a code owner June 12, 2026 21:14
@sofisl sofisl changed the title fix(bazel-bot): remove unused gh and jq dependencies fix(bazel-bot): replace gh and jq dependencies Jun 12, 2026

@codyoss codyoss left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, gave an alternative but I am good with either approach.

-H "Accept: application/vnd.github.v3+json" \
https://api.github.com/app/installations/$GITHUB_APP_INSTALLATION_ID/access_tokens)
GITHUB_TOKEN=$(echo "$RESPONSE" | jq -r .token)
GITHUB_TOKEN=$(echo "$RESPONSE" | python3 -c "import sys, json; print(json.load(sys.stdin)['token'])")

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is clever. It looks like we are using a base image that must already include python so this seems fine. One alternative would be do so this completely with bash instead of an inlined script: GITHUB_TOKEN=$(echo "$RESPONSE" | grep -o '"token": *"[^"]*"' | cut -d'"' -f4)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants