镜像站点 · 本页由第三方 GitHub 只读镜像提供,非 GitHub 官方站点,不接受任何登录或凭据输入。前往 github.com
Skip to content

[CI][Dev] Document how to maintain CROSSBOW_GITHUB_TOKEN #51001

Open

Description

@kou

Describe the enhancement requested

We're using CROSSBOW_GITHUB_TOKEN for comment bot:

- name: Handle GitHub comment event
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
CROSSBOW_GITHUB_TOKEN: ${{ secrets.CROSSBOW_GITHUB_TOKEN }}
run: |
archery --debug trigger-bot \
--event-name "${GITHUB_EVENT_NAME}" \
--event-payload "${GITHUB_EVENT_PATH}"

We need to generate a token that has suitable scope (contents:write actions:write workflows:write, see also #dev > ✔ Update Crossbow tokens @ 💬) and ask INFRA to set it GitHub Actions secret.

We have token expiration notification mechanism: https://lists.apache.org/list?builds@arrow.apache.org:lte=3y:CROSSBOW_GITHUB_TOKEN

But I don't know how to configure it...

Component(s)

Continuous Integration, Developer Tools

Activity

  1. rok commented on Aug 25, 2026

    @rok
    Member

    I was able to simply input CROSSBOW_GITHUB_TOKEN into https://github.com/apache/arrow/settings/secrets/actions and https://github.com/ursacomputing/crossbow/settings/secrets/actions. Is there something more I'm missing?

  2. kou commented on Aug 26, 2026

    @kou
    MemberAuthor

    Oh! I didn't notice that we can set our secrets by ourselves now! It's convenient!

  3. rok commented on Aug 26, 2026

    @rok
    Member

    @kou is there another place we should put CROSSBOW_GITHUB_TOKEN into?

  4. kou commented on Sep 7, 2026

    @kou
    MemberAuthor

    No. If there are any missing places, let's document them.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions