Allow external contribtions to execute checks

Change-type: patch
Signed-off-by: Kyle Harding <kyle@balena.io>
This commit is contained in:
Kyle Harding 2023-01-19 12:17:48 -05:00
parent cf7a865647
commit b26d2e0e7c
No known key found for this signature in database
GPG Key ID: FD3EB16D2161895A

View File

@ -3,14 +3,21 @@ name: Flowzone
on: on:
pull_request: pull_request:
types: [opened, synchronize, closed] types: [opened, synchronize, closed]
branches: branches: [main, master]
- 'main' # allow external contributions to use secrets within trusted code
- 'master' pull_request_target:
types: [opened, synchronize, closed]
branches: [main, master]
jobs: jobs:
flowzone: flowzone:
name: Flowzone name: Flowzone
uses: product-os/flowzone/.github/workflows/flowzone.yml@master uses: product-os/flowzone/.github/workflows/flowzone.yml@master
# prevent duplicate workflows and only allow one `pull_request` or `pull_request_target` for
# internal or external contributions respectively
if: |
(github.event.pull_request.head.repo.full_name == github.repository && github.event_name == 'pull_request') ||
(github.event.pull_request.head.repo.full_name != github.repository && github.event_name == 'pull_request_target')
secrets: inherit secrets: inherit
with: with:
balena_slugs: | balena_slugs: |