-
Notifications
You must be signed in to change notification settings - Fork 66
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix(ci): let the fork workflow use the forked repository and be stricter #960
Conversation
@@ -10,7 +10,7 @@ permissions: | |||
jobs: | |||
test-and-build: | |||
name: Test and Build | |||
if: github.event.pull_request.user.login == 'dependabot[bot]' || github.event.pull_request.head.repo.full_name != github.repository | |||
if: github.event.pull_request.user.login == 'dependabot[bot]' && github.event.pull_request.head.repo.full_name != github.repository |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I assume this is unintentional and we'd want to be strict about this?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't get this second term, actually. If the pull request's repo ISN'T this one?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Oh I see it is happening from a fork, not a branch in this repo? But I'm looking at past dependabot PRs (such as this one #956) and they seem to just be branches on this repo. Where are the forks?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
oh nevermind, I thought this was workflow was meant only for dependabot which forked the repo but I guess it's meant to be external users or dependabot. but the latter condition is basically a way of checking "this is a fork"
1ce6902
to
73e233a
Compare
73e233a
to
6a892da
Compare
From https://github.com/mongodb-js/vscode/actions/runs/13435011260/job/37535233590?pr=959 we see that the intentionally failing tests aren't failing. We need to be explicit about the repository to check out in this case.