mirror of
https://github.com/neondatabase/neon.git
synced 2026-01-04 12:02:55 +00:00
b0a954bde2
## Problem We use ubuntu-latest as a default OS for running jobs. It can cause problems due to instability, so we should use the LTS version of Ubuntu. ## Summary of changes The image ubuntu-latest was changed with ubuntu-22.04 in workflows. ## Checklist before requesting a review - [x] I have performed a self-review of my code. - [ ] If it is a core feature, I have added thorough tests. - [ ] Do we need to implement analytics? if so did you add the relevant metrics to the dashboard? - [ ] If this PR requires public announcement, mark it with /release-notes label and add several sentences in this section. ## Checklist before merging - [ ] Do not forget to reformat commit message to not include the above checklist
37 lines
1.1 KiB
YAML
37 lines
1.1 KiB
YAML
name: Check Permissions
|
|
|
|
on:
|
|
workflow_call:
|
|
inputs:
|
|
github-event-name:
|
|
required: true
|
|
type: string
|
|
|
|
defaults:
|
|
run:
|
|
shell: bash -euo pipefail {0}
|
|
|
|
# No permission for GITHUB_TOKEN by default; the **minimal required** set of permissions should be granted in each job.
|
|
permissions: {}
|
|
|
|
jobs:
|
|
check-permissions:
|
|
runs-on: ubuntu-22.04
|
|
steps:
|
|
- name: Disallow CI runs on PRs from forks
|
|
if: |
|
|
inputs.github-event-name == 'pull_request' &&
|
|
github.event.pull_request.head.repo.full_name != github.repository
|
|
run: |
|
|
if [ "${{ contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.pull_request.author_association) }}" = "true" ]; then
|
|
MESSAGE="Please create a PR from a branch of ${GITHUB_REPOSITORY} instead of a fork"
|
|
else
|
|
MESSAGE="The PR should be reviewed and labelled with 'approved-for-ci-run' to trigger a CI run"
|
|
fi
|
|
|
|
# TODO: use actions/github-script to post this message as a PR comment
|
|
echo >&2 "We don't run CI for PRs from forks"
|
|
echo >&2 "${MESSAGE}"
|
|
|
|
exit 1
|