ci: run the publish-artifacts job last #29
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Backport | |
| on: | |
| # NOTE(negz): This is a risky target, but we run this action only when and if | |
| # a PR is closed, then filter down to specifically merged PRs. We also don't | |
| # invoke any scripts, etc from within the repo. I believe the fact that we'll | |
| # be able to review PRs before this runs makes this fairly safe. | |
| # https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ | |
| pull_request_target: | |
| types: [closed] | |
| # See also commands.yml for the /backport triggered variant of this workflow. | |
| jobs: | |
| backport: | |
| uses: upbound/uptest/.github/workflows/provider-backport.yml@main |