From b26d2e0e7c6a8a8365782fb98c312408376e01e3 Mon Sep 17 00:00:00 2001 From: Kyle Harding Date: Thu, 19 Jan 2023 12:17:48 -0500 Subject: [PATCH] Allow external contribtions to execute checks Change-type: patch Signed-off-by: Kyle Harding --- .github/workflows/flowzone.yml | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) diff --git a/.github/workflows/flowzone.yml b/.github/workflows/flowzone.yml index 69faa5e9..6d47d70b 100644 --- a/.github/workflows/flowzone.yml +++ b/.github/workflows/flowzone.yml @@ -3,14 +3,21 @@ name: Flowzone on: pull_request: types: [opened, synchronize, closed] - branches: - - 'main' - - 'master' + branches: [main, master] + # allow external contributions to use secrets within trusted code + pull_request_target: + types: [opened, synchronize, closed] + branches: [main, master] jobs: flowzone: name: Flowzone uses: product-os/flowzone/.github/workflows/flowzone.yml@master + # prevent duplicate workflows and only allow one `pull_request` or `pull_request_target` for + # internal or external contributions respectively + if: | + (github.event.pull_request.head.repo.full_name == github.repository && github.event_name == 'pull_request') || + (github.event.pull_request.head.repo.full_name != github.repository && github.event_name == 'pull_request_target') secrets: inherit with: balena_slugs: |