Revert "Trigger buildkite on external PRs" (#500)

This commit is contained in:
Cole Helbling 2023-06-01 10:35:23 -07:00 committed by GitHub
parent 5a07b2331b
commit 22aad4a332
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -1,23 +0,0 @@
name: Trigger Buildkite on External PR
on:
pull_request:
types:
- labeled
jobs:
trigger:
# Only intra-repo PRs are allowed to have Buildkite run on them automatically
# In order to allow PRs from third parties to build on Buildkite, we require an org member add a label after the PR has been vetted.
# This will only happen when the label is added, so as to reduce the risk of an innocuous first commit with malicious follow-up commits (after the label was added).
# This means, if the contributor's PR needs changes, someone with the ability to change labels will need to _remove_ the `trigger buildkite` label, _and then re-add it_.
if: github.event.action == 'labeled' && github.event.label.name == 'trigger buildkite'
runs-on: ubuntu-latest
steps:
- name: Trigger a Buildkite Build
uses: "buildkite/trigger-pipeline-action@v1.5.0"
env:
BUILDKITE_API_ACCESS_TOKEN: ${{ secrets.TRIGGER_BK_BUILD_TOKEN }}
PIPELINE: "determinate-systems-inc/nix-installer"
COMMIT: ${{ github.event.pull_request.head.sha }}
MESSAGE: ":github: Triggered from a GitHub Action"