balena-supervisor/.github/workflows/flowzone.yml
Kyle Harding b26d2e0e7c
Allow external contribtions to execute checks
Change-type: patch
Signed-off-by: Kyle Harding <kyle@balena.io>
2023-01-19 12:17:48 -05:00

39 lines
1.4 KiB
YAML

name: Flowzone
on:
pull_request:
types: [opened, synchronize, closed]
branches: [main, master]
# allow external contributions to use secrets within trusted code
pull_request_target:
types: [opened, synchronize, closed]
branches: [main, master]
jobs:
flowzone:
name: Flowzone
uses: product-os/flowzone/.github/workflows/flowzone.yml@master
# prevent duplicate workflows and only allow one `pull_request` or `pull_request_target` for
# internal or external contributions respectively
if: |
(github.event.pull_request.head.repo.full_name == github.repository && github.event_name == 'pull_request') ||
(github.event.pull_request.head.repo.full_name != github.repository && github.event_name == 'pull_request_target')
secrets: inherit
with:
balena_slugs: |
balena_os/aarch64-supervisor,
balena_os/amd64-supervisor,
balena_os/armv7hf-supervisor,
balena_os/i386-supervisor,
balena_os/rpi-supervisor
custom_publish_matrix: balena_os/aarch64-supervisor,
balena_os/amd64-supervisor,
balena_os/armv7hf-supervisor,
balena_os/i386-supervisor,
balena_os/rpi-supervisor
custom_finalize_matrix: balena_os/aarch64-supervisor,
balena_os/amd64-supervisor,
balena_os/armv7hf-supervisor,
balena_os/i386-supervisor,
balena_os/rpi-supervisor