mirror of
https://github.com/rsyslog/rsyslog.git
synced 2026-08-24 19:24:14 +02:00
59aa87218a
* CI: enable run_checks for forks & secure workflows
Previously, the `run_checks` workflow was restricted to run only
for PRs originating from the same repository. This prevented
integration tests from running on PRs submitted from forks.
This change enables `run_checks` for forks by:
1. Removing the repository check in the `if` condition.
2. Adding `permissions: contents: read` to ensure the workflow
runs with minimal privileges, mitigating security risks.
3. Updating the `checkout` step to explicitly use the PR's head
repository and ref.
4. Fetching the `upstream` remote to ensure the git history is
complete for `tj-actions/changed-files`.
Additionally, a `.github/CODEOWNERS` file is added to require
review from @rgerhards for any changes to `.github/workflows/`,
further securing the CI configuration against malicious PRs.
Co-authored-by: rgerhards <1482123+rgerhards@users.noreply.github.com>
3 lines
71 B
Plaintext
3 lines
71 B
Plaintext
.github/workflows/*.yml @rgerhards
|
|
.github/workflows/*.yaml @rgerhards
|