Files
pezkuwi-subxt/.github/workflows/gitspiegel-trigger.yml
T
Alexander Samusev 4c96dca661 [ci] Fix gitspiegel trigger (#3297)
PR removes `pull_request_target` from gitspiegel trigger because it
breaks the logic. With `pull_request_target` the action runs in any case
even for first-time contributors.

cc @mutantcornholio
2024-02-13 10:01:44 +00:00

36 lines
877 B
YAML

name: gitspiegel sync
# This workflow doesn't do anything, it's only use is to trigger "workflow_run"
# webhook, that'll be consumed by gitspiegel
# This way, gitspiegel won't do mirroring, unless this workflow runs,
# and running the workflow is protected by GitHub
on:
pull_request:
types:
- opened
- synchronize
- unlocked
- ready_for_review
- reopened
# doesn't work as intended, triggers "workflow_run" webhook in any case
# the job doesn't check out any code, so it is relatively safe to run it on any event
# pull_request_target:
# types:
# - opened
# - synchronize
# - unlocked
# - ready_for_review
# - reopened
merge_group:
# drop all permissions for GITHUB_TOKEN
permissions: {}
jobs:
sync:
runs-on: ubuntu-latest
steps:
- name: Do nothing
run: echo "let's go"