From f47dcf1fd90494dc763a39b96ab8f9e4f29d3645 Mon Sep 17 00:00:00 2001
From: RJ Sampson <rj.sampson@chainguard.dev>
Date: Sun, 23 Jun 2024 08:17:48 -0600
Subject: [PATCH] fix(ci): Don't sign kernel on PR

Secrets can't be used out of org causing PRs to fail

Signed-off-by: RJ Sampson <rj.sampson@chainguard.dev>
---
 .github/workflows/reusable-build.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/reusable-build.yml b/.github/workflows/reusable-build.yml
index 49b90c9d3f2..b2a9dd94a27 100644
--- a/.github/workflows/reusable-build.yml
+++ b/.github/workflows/reusable-build.yml
@@ -102,7 +102,7 @@ jobs:
 
       - name: Check just syntax
         uses: ublue-os/just-action@v1
-      
+
       - name: Generate tags
         id: generate-tags
         shell: bash
@@ -229,6 +229,7 @@ jobs:
 
       - name: Sign kernel
         uses: ublue-os/kernel-signer@v0.2.3
+        if: github.event_name != 'pull_request'
         with:
           image: ${{ steps.build_image.outputs.image }}
           default-tag: ${{ env.DEFAULT_TAG }}