Add authorize step to both PR workflows

iterative · Oct 20, 2022 · ca843fc · ca843fc
1 parent 11d5bab
commit ca843fc
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 0 deletions.
diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
@@ -10,7 +10,17 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+  authorize:
+    environment:
+      ${{ (github.event_name == 'pull_request_target' &&
+      github.event.pull_request.head.repo.full_name != github.repository) &&
+      'external' || 'internal' }}
+    runs-on: ubuntu-latest
+    steps:
+      - run: echo ✓
+
   build:
+    needs: authorize
     runs-on: ubuntu-latest
     timeout-minutes: 20
     steps:

diff --git a/.github/workflows/cross-platform-test.yml b/.github/workflows/cross-platform-test.yml
@@ -10,7 +10,17 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+  authorize:
+    environment:
+      ${{ (github.event_name == 'pull_request_target' &&
+      github.event.pull_request.head.repo.full_name != github.repository) &&
+      'external' || 'internal' }}
+    runs-on: ubuntu-latest
+    steps:
+      - run: echo ✓
+
   suite:
+    needs: authorize
     runs-on: ${{ matrix.os }}
     timeout-minutes: 20
     strategy: