-
Notifications
You must be signed in to change notification settings - Fork 111
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Cleanup workflows and fix security for appimage PR removal #1761
Conversation
@@ -5,18 +5,14 @@ concurrency: | |||
cancel-in-progress: true | |||
|
|||
on: | |||
pull_request: | |||
pull_request_target: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
does this need to be target?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
That was the main impetus for this. The GCP_CREDENTIALS secret isn't available to a normal pull request. As this does NOT actually checkout code, it seemed safe to just switch it to _target.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ah. Gotcha.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM but curious about target comment
|
One fix to correct the always-failing appimage removal on PR close. The rest is/should just be switching to github runners for trivial (non-code) jobs and removing a now-obsolete workaround.