Skip to content

Instantly share code, notes, and snippets.

@mheap

mheap/workflow.yaml

Created March 9, 2023 12:56
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save mheap/2c66574509e90747b9fd885e2376935c to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save mheap/2c66574509e90747b9fd885e2376935c to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. mheap created this gist Mar 9, 2023.
    31 changes: 31 additions & 0 deletions workflow.yaml
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,31 @@
    name: Demo
    on:
    pull_request_target:
    types: [opened, synchronize, labeled]
    jobs:
    demo:
    runs-on: ubuntu-latest
    steps:
    - name: Check access
    if: ${{ github.event.pull_request.author_association != 'COLLABORATOR' && github.event.pull_request.author_association != 'OWNER' && !contains(github.event.*.labels.*.name, 'ci:run-tests') }}
    run: |
    echo "Event not triggered by a collaborator. Please add the ci:run-tests label to trigger this workflow with the correct permissions"
    exit 1
    - name: Checkout code
    uses: actions/checkout@v3
    with:
    ref: ${{ github.event.pull_request.head.sha }} # This is dangerous without the first access check

    - name: Test
    run: |
    if [[ "x${{ secrets.MY_SECRET }}" == "xval" ]]; then
    echo "Access to secrets"
    else
    echo "No access to secrets"
    exit 1
    fi
    - uses: actions-ecosystem/action-remove-labels@v1
    if: ${{ contains(github.event.*.labels.*.name, 'ci:run-tests') }}
    with:
    labels: ci:run-tests