ci: Update trigger conditions and refs (#49)

* ci: Remove pull_request_target jobs Remove pull_request_target as trigger for jobs since it causes jobs to bypass approvals. * ci/integration: Bump action * ci/hyp: Update reference to riscv-hyp-tests --------- Signed-off-by: Nils Wistoff <[email protected]>
pulp-platform · Sep 25, 2024 · 53491a6 · 53491a6
1 parent d954da9
commit 53491a6
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 4 deletions.
diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
@@ -5,16 +5,17 @@
 # Author: Nils Wistoff <[email protected]>
 
 name: integration
-on: [ push, pull_request_target, workflow_dispatch ]
+on: [ push, pull_request, workflow_dispatch ]
 
 jobs:
   cheshire-integration:
     runs-on: ubuntu-latest
     timeout-minutes: 200
-    if: github.repository == 'pulp-platform/cva6'
+    # Skip on forks due to missing secrets.
+    if: github.repository == 'pulp-platform/cva6' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
     steps:
       - name: Integrate into cheshire
-        uses: pulp-platform/pulp-actions/integrate@v2.2.0
+        uses: pulp-platform/pulp-actions/integrate@v2.3.0
         with:
           ip-name: cva6
           org: pulp-platform

diff --git a/.github/workflows/verible.yml b/.github/workflows/verible.yml
@@ -3,7 +3,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 name: Verible
-on: [push, pull_request_target]
+on: [push, pull_request]
 
 jobs:
   format:
@@ -12,6 +12,8 @@ jobs:
       checks: write
       contents: read
       pull-requests: write
+    # Skip on forks due to missing secrets.
+    if: github.repository == 'pulp-platform/cva6' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
     steps:
       - uses: actions/checkout@v3
         with: