ソースを参照

disable running snyk if triggering user doesn't have access to the secret

El RIDO 10 ヶ月 前
コミット
86d39434a3
1 ファイル変更1 行追加1 行削除
  1. 1 1
      .github/workflows/snyk-scan.yml

+ 1 - 1
.github/workflows/snyk-scan.yml

@@ -17,7 +17,7 @@ jobs:
   # https://github.com/snyk/actions/tree/master/php
   # https://github.com/snyk/actions/tree/master/php
   snyk-php:
   snyk-php:
     runs-on: ubuntu-latest
     runs-on: ubuntu-latest
-    if: ${{ github.repository == 'PrivateBin/PrivateBin' }}
+    if: ${{ github.repository == 'PrivateBin/PrivateBin' && (github.event.pull_request.author_association == 'COLLABORATOR' || github.event.pull_request.author_association == 'OWNER') }}
     steps:
     steps:
       - uses: actions/checkout@v5
       - uses: actions/checkout@v5
       - name: Install Google Cloud Storage
       - name: Install Google Cloud Storage