Branch: refs/heads/master Home: https://github.com/openSUSE/open-build-service Commit: 359b51925d5bf45018e3c5abe23c4f07e109e42a https://github.com/openSUSE/open-build-service/commit/359b51925d5bf45018e3c5... Author: Lukas Krause Date: 2023-04-13 (Thu, 13 Apr 2023) Changed paths: A .github/workflows/comment_diffend_io_links_to_pr.yml A .github/workflows/create_diffend_io_links.yml R .github/workflows/diffend_gem_binary_diff.yml Log Message: ----------- Split github action workflows into two separate workflows In order to allow the creation of comments on PR's that are coming from forks, we would need to use the `:pull_request_target` event over the `:pull_request` event. Since the `:pull_request_target` event comes with more permissions on the target repo, its not recommended to checkout the code coming from an untrusted fork. Therefore the gh action workflow is now splited into two separate workflows. One workflow keeps working on the `:pull_request` event and checksout the code to perform the diff operation in order to receive gem name, version etc. Afterwards the informations are saved as artifacts. The second workflow listens for the `workflow_run` event and gets triggered after the first one finished successfully, then downloads the artifacts and finally creates the comment (the `:workflow_run` event has permission to comment on the PR). Commit: da1ff051961f4fcefdc374d8b60adc28fb239002 https://github.com/openSUSE/open-build-service/commit/da1ff051961f4fcefdc374... Author: Henne Vogelsang Date: 2023-04-14 (Fri, 14 Apr 2023) Changed paths: A .github/workflows/comment_diffend_io_links_to_pr.yml A .github/workflows/create_diffend_io_links.yml R .github/workflows/diffend_gem_binary_diff.yml Log Message: ----------- Merge pull request #14159 from krauselukas/fix/use_pull_request_target Split github action workflows into two separate workflows Compare: https://github.com/openSUSE/open-build-service/compare/65b66f61cfa2...da1ff0...