From 81ce1e017440715b963a379392acb66decfd1884 Mon Sep 17 00:00:00 2001 From: David Holland Date: Thu, 30 Jan 2025 15:31:48 -0500 Subject: [PATCH] CI: Test the repository owner before doing things involving secrets. This will prevent them from running and failing in forked repos. --- .github/workflows/ci.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index c9ec10edb..eaa20d4da 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -212,14 +212,14 @@ jobs: - shell: bash run: .github/ci.sh zip_dist_with_solvers $NAME-with-solvers - - if: matrix.ghc == '9.4.8' && github.event.pull_request.head.repo.fork == false + - if: matrix.ghc == '9.4.8' && github.event.pull_request.head.repo.fork == false && github.repository_owner == 'GaloisInc' shell: bash env: SIGNING_PASSPHRASE: ${{ secrets.SIGNING_PASSPHRASE }} SIGNING_KEY: ${{ secrets.SIGNING_KEY }} run: .github/ci.sh sign $NAME.tar.gz - - if: matrix.ghc == '9.4.8' && github.event.pull_request.head.repo.fork == false + - if: matrix.ghc == '9.4.8' && github.event.pull_request.head.repo.fork == false && github.repository_owner == 'GaloisInc' shell: bash env: SIGNING_PASSPHRASE: ${{ secrets.SIGNING_PASSPHRASE }} @@ -639,7 +639,7 @@ jobs: build-push-image: runs-on: ubuntu-22.04 needs: [config] - if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch' || needs.config.outputs.release == 'true' + if: (github.event_name == 'schedule' || github.event_name == 'workflow_dispatch' || needs.config.outputs.release == 'true') && github.repository_owner == 'GaloisInc' strategy: fail-fast: false matrix: