Skip to content

[gha] allow external contributors build/lint #991

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

rustielin
Copy link
Contributor

@rustielin rustielin commented Jun 18, 2025

This PR introduces pull_request_target for the main CI build/lint job. It requires permissions since there are some internal packages that are used in part of the build. The permission-check job ensures the permissions are locked down, and Semgrep enforces that job's existence.

This PR is tested by #992 , which should be safe to land alongside it as long as Semgrep passes on it

Copy link

vercel bot commented Jun 18, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
developer-docs-nextra 🛑 Canceled (Inspect) Jun 18, 2025 11:09pm

Copy link
Contributor Author

rustielin commented Jun 18, 2025

@rustielin rustielin force-pushed the 06-18-_gha_fix_artifactregistry_login branch from da3188a to 24f4686 Compare June 18, 2025 22:04
@rustielin rustielin force-pushed the 06-18-_gha_allow_external_contributors_build_lint branch from 0ff38ff to ac4c657 Compare June 18, 2025 22:04
@rustielin rustielin force-pushed the 06-18-_gha_fix_artifactregistry_login branch from 24f4686 to 9a846bc Compare June 18, 2025 22:05
@rustielin rustielin force-pushed the 06-18-_gha_allow_external_contributors_build_lint branch from ac4c657 to 9b8cb25 Compare June 18, 2025 22:05
@rustielin rustielin force-pushed the 06-18-_gha_fix_artifactregistry_login branch from 9a846bc to d274994 Compare June 18, 2025 22:27
@rustielin rustielin force-pushed the 06-18-_gha_allow_external_contributors_build_lint branch from 9b8cb25 to 4b91cbc Compare June 18, 2025 22:27
@rustielin rustielin force-pushed the 06-18-_gha_fix_artifactregistry_login branch from d274994 to fc5ee95 Compare June 18, 2025 22:29
@rustielin rustielin force-pushed the 06-18-_gha_allow_external_contributors_build_lint branch from 4b91cbc to 8961daf Compare June 18, 2025 22:29
@rustielin rustielin marked this pull request as ready for review June 18, 2025 22:45
@rustielin rustielin requested review from zi0Black and a team June 18, 2025 22:47
@rustielin rustielin changed the base branch from 06-18-_gha_fix_artifactregistry_login to graphite-base/991 June 18, 2025 23:01
@rustielin rustielin force-pushed the 06-18-_gha_allow_external_contributors_build_lint branch from 8961daf to c451f29 Compare June 18, 2025 23:02
@rustielin rustielin force-pushed the graphite-base/991 branch from fc5ee95 to 067b1ec Compare June 18, 2025 23:02
@graphite-app graphite-app bot changed the base branch from graphite-base/991 to main June 18, 2025 23:02
@rustielin rustielin force-pushed the 06-18-_gha_allow_external_contributors_build_lint branch from c451f29 to 7675e73 Compare June 18, 2025 23:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants