Apply suggestions from code review

Co-Authored-By: Peter Evans <peter-evans@users.noreply.github.com>
This commit is contained in:
Jérémy Derussé 2020-03-29 12:43:21 +02:00 committed by GitHub
parent 4c347a4514
commit 6bb0e7771c
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
4 changed files with 5 additions and 5 deletions

View file

@ -180,7 +180,7 @@ How to use SSH (deploy keys) with create-pull-request action:
token: ${{ secrets.GITHUB_TOKEN }}
```
### Push in fork
### Push pull request branches to a fork
To enforce security, you can use a dedicated user using [machine account](https://help.github.com/en/github/site-policy/github-terms-of-service#3-account-requirements).
This user has no access to the main repository, it will use their own fork to push code and create the pull request.
@ -190,7 +190,7 @@ This user has no access to the main repository, it will use their own fork to pu
3. create a [Personal Access Token (PAT)](https://help.github.com/en/github/authenticating-to-github/creating-a-personal-access-token-for-the-command-line).
4. logout and go back to your main user.
5. Add a secret to the repository containing the above PAT.
6. As show in the example below, switch the git remote to the fork's url after checkout and set the option `request-on-parent`
6. As shown in the example below, switch the git remote to the fork's url after checkout and set the action input `request-on-parent` to `true`.
```yaml
- uses: actions/checkout@v2