Skip to content

chore: update model_card_consistency_reminder.yml#4276

Closed
hf-security-analysis[bot] wants to merge 1 commit into
mainfrom
security-fix/-github-workflows-model_card_consistency_reminder-yml-1779872337
Closed

chore: update model_card_consistency_reminder.yml#4276
hf-security-analysis[bot] wants to merge 1 commit into
mainfrom
security-fix/-github-workflows-model_card_consistency_reminder-yml-1779872337

Conversation

@hf-security-analysis

@hf-security-analysis hf-security-analysis Bot commented May 27, 2026

Copy link
Copy Markdown
Contributor

Update .github/workflows/model_card_consistency_reminder.yml workflow configuration.

cc @Wauplin

Closes huggingface/tracking-issues#781


Note

Low Risk
Single workflow secret swap; may affect whether the bot can post comments if default token permissions are tighter than the old bot.

Overview
The Model and Dataset Card consistency reminder workflow now authenticates the sticky PR comment step with the built-in GITHUB_TOKEN instead of secrets.comment_bot_token.

No other workflow steps or comment content change—only which credential posts/maintains the reminder on PRs that touch repocard or card templates.

Reviewed by Cursor Bugbot for commit 25536fa. Bugbot is set up for automated code reviews on this repo. Configure here.

@hf-security-analysis hf-security-analysis Bot requested a review from paulinebm May 27, 2026 08:59
@bot-ci-comment

Copy link
Copy Markdown

The docs for this PR live here. All of your documentation changes will be reflected on that endpoint. The docs are available until 30 days after the last update.

@Wauplin

Wauplin commented May 27, 2026

Copy link
Copy Markdown
Collaborator

closing in favor of #4277

@Wauplin Wauplin closed this May 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant