ci(actions): restrict 'pull_request' runs to outer PRs (#1221)

'push' runs will run anyway on commits inside of repository
OpenVK · Jan 31, 2025 · 8a979fa · 8a979fa
1 parent 6ec54a3
commit 8a979fa
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 0 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -14,6 +14,12 @@ jobs:
 
         runs-on: ubuntu-latest
 
+        # 'push' runs on inner branches, 'pull_request' will run only on outer PRs
+        if: >
+          github.event_name == 'push'
+          || (github.event_name == 'pull_request'
+              && github.event.pull_request.head.repo.full_name != github.repository)
+
         steps:
             - name: Set up QEMU
               uses: docker/setup-qemu-action@v3
@@ -64,6 +70,12 @@ jobs:
         name: Build DB images
 
         runs-on: ubuntu-latest
+
+        # 'push' runs on inner branches, 'pull_request' will run only on outer PRs
+        if: >
+          github.event_name == 'push'
+          || (github.event_name == 'pull_request'
+              && github.event.pull_request.head.repo.full_name != github.repository)
 
         steps:
             - name: Set up QEMU

diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
@@ -7,6 +7,13 @@ on:
 jobs:
   lint:
     runs-on: ubuntu-20.04
+
+    # 'push' runs on inner branches, 'pull_request' will run only on outer PRs
+    if: >
+      github.event_name == 'push'
+      || (github.event_name == 'pull_request'
+          && github.event.pull_request.head.repo.full_name != github.repository)
+
     permissions:
       contents: read
     steps: