forked from mirrors/nixpkgs
workflows: check maintainers sortedness on pull_request_target
`pull_request` workflows need approval to run, `pull_request_target` does not. this one isn't particularly vulnerable and doesn't take long to run, so we may as well run it without approval.
This commit is contained in:
parent
42abb58ab3
commit
2daba98981
|
@ -1,7 +1,7 @@
|
||||||
name: "Check that maintainer list is sorted"
|
name: "Check that maintainer list is sorted"
|
||||||
|
|
||||||
on:
|
on:
|
||||||
pull_request:
|
pull_request_target:
|
||||||
paths:
|
paths:
|
||||||
- 'maintainers/maintainer-list.nix'
|
- 'maintainers/maintainer-list.nix'
|
||||||
permissions:
|
permissions:
|
||||||
|
@ -13,6 +13,9 @@ jobs:
|
||||||
if: github.repository_owner == 'NixOS'
|
if: github.repository_owner == 'NixOS'
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v3
|
- uses: actions/checkout@v3
|
||||||
|
with:
|
||||||
|
# pull_request_target checks out the base branch by default
|
||||||
|
ref: refs/pull/${{ github.event.pull_request.number }}/merge
|
||||||
- uses: cachix/install-nix-action@v19
|
- uses: cachix/install-nix-action@v19
|
||||||
with:
|
with:
|
||||||
# explicitly enable sandbox
|
# explicitly enable sandbox
|
||||||
|
|
Loading…
Reference in a new issue