From 428710c2ec057058a482e7723b0b46db3052660a Mon Sep 17 00:00:00 2001 From: Lianmin Zheng Date: Sat, 25 Oct 2025 12:23:54 -0700 Subject: [PATCH] clean up github tokens (#12126) Co-authored-by: sglang-bot --- .github/workflows/bot-bump-kernel-version.yml | 2 +- .github/workflows/bot-bump-sglang-version.yml | 2 +- .github/workflows/ci-monitor.yml | 5 ++--- .github/workflows/label-pr.yml | 2 +- .github/workflows/nightly-test.yml | 4 ++-- .github/workflows/pr-test.yml | 1 - .github/workflows/release-fake-tag.yml | 8 ++++---- 7 files changed, 11 insertions(+), 13 deletions(-) diff --git a/.github/workflows/bot-bump-kernel-version.yml b/.github/workflows/bot-bump-kernel-version.yml index 72004e191..91a808c6a 100644 --- a/.github/workflows/bot-bump-kernel-version.yml +++ b/.github/workflows/bot-bump-kernel-version.yml @@ -45,6 +45,6 @@ jobs: - name: Commit and create PR env: - GH_TOKEN: ${{ secrets.GH_PAT_FOR_TAGGING }} + GH_TOKEN: ${{ secrets.GH_PAT_FOR_PULL_REQUEST }} run: | bash scripts/release/commit_and_pr.sh "sgl-kernel" "${{ github.event.inputs.new_version }}" "$BRANCH_NAME" diff --git a/.github/workflows/bot-bump-sglang-version.yml b/.github/workflows/bot-bump-sglang-version.yml index 84a3f9dfc..93737e013 100644 --- a/.github/workflows/bot-bump-sglang-version.yml +++ b/.github/workflows/bot-bump-sglang-version.yml @@ -45,6 +45,6 @@ jobs: - name: Commit and create PR env: - GH_TOKEN: ${{ secrets.GH_PAT_FOR_TAGGING }} + GH_TOKEN: ${{ secrets.GH_PAT_FOR_PULL_REQUEST }} run: | bash scripts/release/commit_and_pr.sh "SGLang" "${{ github.event.inputs.new_version }}" "$BRANCH_NAME" diff --git a/.github/workflows/ci-monitor.yml b/.github/workflows/ci-monitor.yml index 4ec34585d..a917082c9 100644 --- a/.github/workflows/ci-monitor.yml +++ b/.github/workflows/ci-monitor.yml @@ -3,7 +3,6 @@ name: CI Monitor on: schedule: - cron: '0 */12 * * *' # Every 12 hours for main analysis - - cron: '0 6 * * *' # Daily at 6:00 AM UTC for balance analysis workflow_dispatch: inputs: limit: @@ -40,7 +39,7 @@ jobs: - name: Run CI Analysis env: - GITHUB_TOKEN: ${{ secrets.GH_PAT_FOR_NIGHTLY_CI }} + GITHUB_TOKEN: ${{ secrets.GH_PAT_FOR_NIGHTLY_CI_DATA }} PYTHONUNBUFFERED: 1 PYTHONIOENCODING: utf-8 run: | @@ -49,7 +48,7 @@ jobs: - name: Run Performance Analysis env: - GITHUB_TOKEN: ${{ secrets.GH_PAT_FOR_NIGHTLY_CI }} + GITHUB_TOKEN: ${{ secrets.GH_PAT_FOR_NIGHTLY_CI_DATA }} PYTHONUNBUFFERED: 1 PYTHONIOENCODING: utf-8 run: | diff --git a/.github/workflows/label-pr.yml b/.github/workflows/label-pr.yml index 9e148f42b..8e88d6494 100644 --- a/.github/workflows/label-pr.yml +++ b/.github/workflows/label-pr.yml @@ -26,7 +26,7 @@ jobs: if: steps.checkAccess.outputs.require-result == 'true' uses: actions/github-script@v7 with: - github-token: ${{ secrets.GH_PAT_FOR_TAGGING }} + github-token: ${{ secrets.GH_PAT_FOR_PULL_REQUEST }} script: | github.rest.issues.addLabels({ owner: context.repo.owner, diff --git a/.github/workflows/nightly-test.yml b/.github/workflows/nightly-test.yml index a7535fbac..c95b84cc6 100644 --- a/.github/workflows/nightly-test.yml +++ b/.github/workflows/nightly-test.yml @@ -54,7 +54,7 @@ jobs: - name: Publish traces to storage repo env: - GITHUB_TOKEN: ${{ secrets.GH_PAT_FOR_NIGHTLY_CI }} + GITHUB_TOKEN: ${{ secrets.GH_PAT_FOR_NIGHTLY_CI_DATA }} GITHUB_RUN_ID: ${{ github.run_id }} GITHUB_RUN_NUMBER: ${{ github.run_number }} run: | @@ -99,7 +99,7 @@ jobs: - name: Publish traces to storage repo env: - GITHUB_TOKEN: ${{ secrets.GH_PAT_FOR_NIGHTLY_CI }} + GITHUB_TOKEN: ${{ secrets.GH_PAT_FOR_NIGHTLY_CI_DATA }} GITHUB_RUN_ID: ${{ github.run_id }} GITHUB_RUN_NUMBER: ${{ github.run_number }} run: | diff --git a/.github/workflows/pr-test.yml b/.github/workflows/pr-test.yml index c1166ea85..bb3a66b0d 100644 --- a/.github/workflows/pr-test.yml +++ b/.github/workflows/pr-test.yml @@ -159,7 +159,6 @@ jobs: if: needs.check-changes.outputs.sgl_kernel == 'true' runs-on: 1-gpu-runner env: - HF_TOKEN: ${{ secrets.HF_TOKEN }} CI: true steps: - uses: actions/checkout@v4 diff --git a/.github/workflows/release-fake-tag.yml b/.github/workflows/release-fake-tag.yml index ce5999506..be30633c5 100644 --- a/.github/workflows/release-fake-tag.yml +++ b/.github/workflows/release-fake-tag.yml @@ -18,6 +18,8 @@ jobs: steps: - name: Checkout repository uses: actions/checkout@v4 + with: + token: ${{ secrets.GITHUB_TOKEN }} - name: Get version id: get_version @@ -26,10 +28,8 @@ jobs: echo "TAG=v$version" >> $GITHUB_OUTPUT - name: Create and push fake tag - env: - GITHUB_TOKEN: ${{ secrets.REPO_TOKEN }} run: | - git config user.name zhyncs - git config user.email me@zhyncs.com + git config user.name "sglang-bot" + git config user.email "sglang-bot@users.noreply.github.com" git checkout -b ${{ steps.get_version.outputs.TAG }} git push --set-upstream origin ${{ steps.get_version.outputs.TAG }}