New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Support for forked repo workflows #28

Closed

3 tasks done

vio opened this issue Mar 15, 2021 · 3 comments

Labels

bug

Member

vio commented Mar 15, 2021 •

edited

Loading

check env-ci data for forked repo actions
check flow by github event (pull_request, pull_request_target)
check integrations (check, pr comment, slack) and urls

The text was updated successfully, but these errors were encountered:

vio added the investigation label

vio changed the title ~~Support for forks workflow~~ Support for forked repo workflows

Member Author

vio commented Apr 10, 2021 •

edited

Loading

There are multiple issues when trying to run the agent with PRs from forks:

pull_request event is not reporting the same data as push
pull_request is not exposing secrets for builds triggered from forks

To do:

fix @relative-ci/agent to report the GitHub action ref (fix: Use prBranch as default source for branch name agent#284, @relative-ci/[email protected])
fix env-ci to extract the correct data (Github Action incorrect behavior semantic-release/env-ci#96)
document workflow configuration based on https://securitylab.github.com/research/github-actions-preventing-pwn-requests/

vio added bug and removed investigation labels

vio mentioned this issue

Support for workflow_run workflows relative-ci/agent-action#4

Merged

vio pinned this issue

Member Author

vio commented Sep 5, 2021

Ready for testing using relative-ci/agent-action@workflow-run-support GitHub action.

Documentation: https://relative-ci.com/documentation/setup/agent/github-action/#workflows-triggered-by-forked-repositories-beta
Example: https://github.com/relative-ci/example-github-action-fork-pull-request

Member Author

vio commented Feb 14, 2022

Support for workflows triggered by forked repository is now available on relative-ci/agent-action@v2

vio closed this as completed

vio unpinned this issue

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment