-
Notifications
You must be signed in to change notification settings - Fork 20
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Break workflows into separate 'E2E Test' and 'Build and Unit Test' workflows, use pull_request
instead of pull_request_target
across workflows
#575
base: main
Are you sure you want to change the base?
Conversation
c60cfd9
to
aa27078
Compare
The |
6d13cfd
to
d71fa93
Compare
Ensure only users with write permissions can run CI Signed-off-by: Kyle Squizzato <[email protected]>
This patch breaks the e2e test and build workflows apart making it so that all workflows return to using 'pull_request' to avoid any security issues and other frustrations surrounding 'pull_request_target' We now have 2 workflow files, one for build and unit tests which uses 'pull_request' and one for e2e tests. The e2e tests require secret population and must be created on branch to run, they also require the 'test e2e' label to prevent uneccessary execution. Signed-off-by: Kyle Squizzato <[email protected]>
d71fa93
to
916b428
Compare
Signed-off-by: Kyle Squizzato <[email protected]>
pull_request
instead of pull_request_target
across workflows
I'm still seeing issues running tests on With other OSS projects following suite of running their e2e tests from repo branches I think it's best we do the same. |
Signed-off-by: Kyle Squizzato <[email protected]>
This PR makes the workflow changes discussed on Slack, moving away from
pull_request_target
and usingpull_request
across workflows. The decision to move away frompull_request_target
entirely was made here: #575 (comment)