From 1323c5b99edb57d2c1107cd571941f7a0814a16a Mon Sep 17 00:00:00 2001
From: DJ Mountney <david@twkie.net>
Date: Mon, 8 Jul 2024 13:37:47 -0700
Subject: [PATCH] Remove trafico in favor of our community bot (#390)

* Remove traffico in favor of our community bot

* Add changelog
---
 .github/workflows/trafico.yml | 39 -----------------------------------
 upcoming-release-notes/390.md |  6 ++++++
 2 files changed, 6 insertions(+), 39 deletions(-)
 delete mode 100644 .github/workflows/trafico.yml
 create mode 100644 upcoming-release-notes/390.md

diff --git a/.github/workflows/trafico.yml b/.github/workflows/trafico.yml
deleted file mode 100644
index c39fb0668..000000000
--- a/.github/workflows/trafico.yml
+++ /dev/null
@@ -1,39 +0,0 @@
-##########################################################################################
-# WARNING! This workflow uses the 'pull_request_target' event. That mans that it will    #
-# always run in the context of the main actualbudget/actual repo, even if the PR is from #
-# a fork. This is necessary to get access to a GitHub token that can modify the PR.      #
-# Be VERY CAREFUL about adding things to this workflow, since forks can inject           #
-# arbitrary code into their branch, and can pollute the artifacts we download. Arbitrary #
-# code execution in this workflow could lead to a compromise of the main repo.           #
-##########################################################################################
-# See: https://securitylab.github.com/research/github-actions-preventing-pwn-requests    #
-##########################################################################################
-
-name: Trafico Reviews
-
-on:
-  pull_request_target:
-    types:
-     - opened
-     - closed
-     - reopened
-     - synchronize
-     - edited
-     - review_requested
-     - review_request_removed
-  pull_request_review:
-    types: [submitted, edited, dismissed]
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
-  cancel-in-progress: true
-
-jobs:
-  manage-review:
-    runs-on: ubuntu-latest
-    permissions:
-      pull-requests: write
-    steps:
-      - uses: actualbudget/trafico@main
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
\ No newline at end of file
diff --git a/upcoming-release-notes/390.md b/upcoming-release-notes/390.md
new file mode 100644
index 000000000..c6a77c44b
--- /dev/null
+++ b/upcoming-release-notes/390.md
@@ -0,0 +1,6 @@
+---
+category: Maintenance
+authors: [twk3]
+---
+
+Remove the Trafico GitHub workflow