ci: switch from pull_request_target to pull_request trigger (#463)
Some checks are pending
CI / test (macos-latest, 3.10) (push) Waiting to run
CI / test (macos-latest, 3.11) (push) Waiting to run
CI / test (macos-latest, 3.12) (push) Waiting to run
CI / test (macos-latest, 3.13) (push) Waiting to run
CI / test (macos-latest, 3.8) (push) Waiting to run
CI / test (macos-latest, 3.9) (push) Waiting to run
CI / test (true, ubuntu-latest, 3.13) (push) Waiting to run
CI / test (ubuntu-latest, 3.10) (push) Waiting to run
CI / test (ubuntu-latest, 3.11) (push) Waiting to run
CI / test (ubuntu-latest, 3.12) (push) Waiting to run
CI / test (ubuntu-latest, 3.8) (push) Waiting to run
CI / test (ubuntu-latest, 3.9) (push) Waiting to run
CI / test (windows-latest, 3.10) (push) Waiting to run
CI / test (windows-latest, 3.11) (push) Waiting to run
CI / test (windows-latest, 3.12) (push) Waiting to run
CI / test (windows-latest, 3.13) (push) Waiting to run
CI / test (windows-latest, 3.8) (push) Waiting to run
CI / test (windows-latest, 3.9) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
Build & Push Container / ECR (push) Waiting to run
Build & Push Container / GHCR (push) Waiting to run
release-please / release (push) Waiting to run
OSSF Scorecard / Scorecard analysis (push) Waiting to run

This commit is contained in:
Mickael 2025-07-27 06:44:15 +02:00 committed by GitHub
parent c8eb5be143
commit 148f1719aa
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 8 additions and 8 deletions

View file

@ -1,6 +1,6 @@
name: Manage PR Temp Envs
'on':
pull_request_target:
pull_request:
types:
- labeled
- unlabeled

View file

@ -7,12 +7,12 @@ on:
tags:
- '*'
merge_group:
pull_request_target:
pull_request:
types: [labeled, synchronize, reopened, ready_for_review, opened]
env:
PUSH_FROM_PR: >-
${{ github.event_name == 'pull_request_target' &&
${{ github.event_name == 'pull_request' &&
(
contains(github.event.pull_request.labels.*.name, 'push-container') ||
contains(github.event.pull_request.labels.*.name, 'deploy-pr-temp-env')
@ -75,7 +75,7 @@ jobs:
with:
context: .
platforms: linux/amd64, linux/arm64
push: ${{ github.event_name != 'pull_request_target' || env.PUSH_FROM_PR == 'true' }}
push: ${{ github.event_name != 'pull_request' || env.PUSH_FROM_PR == 'true' }}
tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }}
cache-from: type=gha

View file

@ -7,7 +7,7 @@ on:
tags:
- '*'
merge_group:
pull_request_target:
pull_request:
types: [labeled, synchronize, reopened, ready_for_review, opened]
concurrency:
@ -18,7 +18,7 @@ env:
REGISTRY: ghcr.io
IMAGE_NAME: ${{ github.repository }}
PUSH_FROM_PR: >-
${{ github.event_name == 'pull_request_target' &&
${{ github.event_name == 'pull_request' &&
(
contains(github.event.pull_request.labels.*.name, 'push-container') ||
contains(github.event.pull_request.labels.*.name, 'deploy-pr-temp-env')
@ -84,14 +84,14 @@ jobs:
with:
context: .
platforms: linux/amd64, linux/arm64
push: ${{ github.event_name != 'pull_request_target' || env.PUSH_FROM_PR == 'true' }}
push: ${{ github.event_name != 'pull_request' || env.PUSH_FROM_PR == 'true' }}
tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }}
cache-from: type=gha
cache-to: type=gha,mode=max
- name: Generate artifact attestation
if: github.event_name != 'pull_request_target' || env.PUSH_FROM_PR == 'true'
if: github.event_name != 'pull_request' || env.PUSH_FROM_PR == 'true'
uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2.4.0
with:
subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}