name: PR build
permissions: {}
concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true
on:
pull_request:
jobs:
build:
uses: ./.github/workflows/build.yml
if: github.repository == 'blue-build/cli'
permissions:
contents: read packages: write id-token: write actions: read with:
repo: ${{ github.event.pull_request.head.repo.full_name }}
ref: ${{ github.event.pull_request.head.ref }}
secrets:
SIGNING_SECRET: ${{ secrets.SIGNING_SECRET }}
test:
uses: ./.github/workflows/test.yml
permissions:
contents: read packages: write id-token: write with:
repo: ${{ github.event.pull_request.head.repo.full_name }}
ref: ${{ github.event.pull_request.head.ref }}
pr_event_number: ${{ github.event.number }}
secrets:
TEST_SIGNING_SECRET: ${{ secrets.TEST_SIGNING_SECRET }}