#153 💚 updating to only build PRs via GitHub Action when they are app…

…roved
TechnologyBrewery · Jun 24, 2024 · 4881a3d · 4881a3d
1 parent fb9ee60
commit 4881a3d
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 7 deletions.
diff --git a/.github/workflows/maven.yaml b/.github/workflows/maven.yaml
@@ -11,12 +11,12 @@ name: Build Habushu
 on:
     push:
         branches: [ "dev" ]
-    pull_request_target:
-        branches: [ "dev" ]
+    pull_request_review:
+      types: [submitted]
 
 jobs:
     build:
-
+        if: github.event.review.state == 'approved'
         runs-on: ubuntu-latest
 
         steps:
@@ -49,7 +49,3 @@ jobs:
 
             - name: Test habushu-maven-plugin
               run: mvn -B install --file pom.xml -Dhabushu.usePyenv=false
-
-            # Optional: Uploads the full dependency graph to GitHub to improve the quality of Dependabot alerts this repository can receive
-            - name: Update dependency graph
-              uses: advanced-security/maven-dependency-submission-action@v4
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -53,3 +53,7 @@ jobs:
                   MAVEN_PASSWORD: ${{ secrets.SONATYPE_CENTRAL_REPO_TOKEN_KEY }}
                   GPG_PASSPHRASE: ${{ secrets.GPG_PRIVATE_KEY_PASSPHRASE }}
                   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+            # Optional: Uploads the full dependency graph to GitHub to improve the quality of Dependabot alerts this repository can receive
+            - name: Update dependency graph
+              uses: advanced-security/maven-dependency-submission-action@v4