mirror of
https://github.com/bitwarden/browser
synced 2025-12-06 00:13:28 +00:00
39 lines
1.1 KiB
YAML
39 lines
1.1 KiB
YAML
# This workflow is intended to be run when we need to build the client and produce artifacts that require secrets
|
|
# when the PR source branch does not have access to secrets (e.g. a fork).
|
|
# This workflow will run in the context of the target of the PR and have access to secrets.
|
|
# This should only be done after reviewing the PR to ensure that no malicious code has been introduced,
|
|
# as it could allow the code on the forked branch to have access to workflow secrets.
|
|
|
|
name: Build Web on PR Target
|
|
|
|
on:
|
|
pull_request:
|
|
types: [opened, synchronize]
|
|
branches-ignore:
|
|
- 'l10n_master'
|
|
- 'cf-pages'
|
|
paths:
|
|
- 'apps/web/**'
|
|
- 'libs/**'
|
|
- '*'
|
|
- '!*.md'
|
|
- '!*.txt'
|
|
- '.github/workflows/build-web.yml'
|
|
|
|
defaults:
|
|
run:
|
|
shell: bash
|
|
|
|
jobs:
|
|
check-run:
|
|
name: Check PR run
|
|
uses: bitwarden/gh-actions/.github/workflows/check-run.yml@main
|
|
|
|
run-workflow:
|
|
name: Build Web
|
|
needs: check-run
|
|
if: ${{ github.event.pull_request.head.repo.full_name != github.repository }}
|
|
uses: ./.github/workflows/build-web.yml
|
|
secrets: inherit
|
|
|