Commit 9dc7156c02 for bind
commit 9dc7156c0245c9a37205f1acf04eb117548dac40
Author: Štěpán Balážik <stepan@isc.org>
Date: Sun Sep 13 16:34:06 2026 +0200
Use the Danger token in dangerfile.py
dangerfile.py opened its own API session with BIND_TEAM_API_TOKEN even
though the Hazard runner that executes it already authenticates with
DANGER_GITLAB_API_TOKEN. Reuse that token, so that the job needs a
single secret, and rename its environment accordingly.
Assisted-by: Claude:claude-opus-5
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 16c6667322..330466f8ee 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -824,7 +824,7 @@ shfmt:
danger:
<<: *quick_checks_job
environment:
- name: api-danger
+ name: danger
action: access
script:
- pip install git+https://gitlab.isc.org/isc-projects/hazard.git
diff --git a/dangerfile.py b/dangerfile.py
index 2acc5ef260..2b74eb7883 100644
--- a/dangerfile.py
+++ b/dangerfile.py
@@ -61,7 +61,7 @@ is_full_backport = is_backport and "Backport::Partial" not in mr_labels
gl = gitlab.Gitlab(
url=f"https://{os.environ['CI_SERVER_HOST']}",
- private_token=os.environ["BIND_TEAM_API_TOKEN"],
+ private_token=os.environ["DANGER_GITLAB_API_TOKEN"],
)
proj = gl.projects.get(os.environ["CI_PROJECT_ID"])
mr = proj.mergerequests.get(os.environ["CI_MERGE_REQUEST_IID"])