Update github workflows

Signed-off-by: Guvenc Gulce <[email protected]>
ironcore-dev · Nov 30, 2023 · a220fb0 · a220fb0
1 parent d7d2d20
commit a220fb0
Show file tree

Hide file tree

Showing 5 changed files with 20 additions and 22 deletions.
diff --git a/.github/workflows/checkpatch.yaml b/.github/workflows/checkpatch.yaml
@@ -1,7 +1,7 @@
 name: checkpatch
 
 on: 
-  pull_request_target:
+  pull_request:
     paths-ignore:
       - 'docs/**'
       - '**/*.md'
@@ -13,9 +13,7 @@ on:
 
 jobs:
   checkpatch:
-    runs-on:
-      labels: self-hosted
-      group: organization/default
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
         with:

diff --git a/.github/workflows/publish-docker-tester.yml b/.github/workflows/publish-docker-tester.yml
@@ -12,25 +12,23 @@ on:
     paths-ignore:
       - 'docs/**'
       - '**/*.md'
-  pull_request_target:
+  pull_request:
     paths-ignore:
       - 'docs/**'
       - '**/*.md'
 
 jobs:
   buildAndPushTester:
-    runs-on:
-      labels: self-hosted
-      group: organization/default
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
         with:
-          ref: ${{ github.event_name == 'release' && github.ref || github.event_name == 'push' && github.ref || github.event_name == 'pull_request_target' && github.event.pull_request.head.ref || github.event_name == 'pull_request' && github.event.pull_request.head.ref }}
+          ref: ${{ github.event_name == 'release' && github.ref || github.event_name == 'push' && github.ref || github.event_name == 'pull_request' && github.event.pull_request.head.ref || github.event_name == 'pull_request' && github.event.pull_request.head.ref }}
           fetch-depth: 0
       - name: Determine SHA for Docker Image
         id: get_sha
         run: |
-          if [[ "${{ github.event_name }}" == "pull_request_target" ]]; then
+          if [[ "${{ github.event_name }}" == "pull_request" ]]; then
             echo "DOCKER_IMAGE_SHA=${{ github.event.pull_request.head.sha }}" >> $GITHUB_ENV
           else
            echo "DOCKER_IMAGE_SHA=${{ github.sha }}" >> $GITHUB_ENV
@@ -95,7 +93,7 @@ jobs:
       - name: Determine SHA for Docker Image
         id: get_sha
         run: |
-          if [[ "${{ github.event_name }}" == "pull_request_target" ]]; then
+          if [[ "${{ github.event_name }}" == "pull_request" ]]; then
             echo "DOCKER_IMAGE_SHA=${{ github.event.pull_request.head.sha }}" >> $GITHUB_ENV
           else
             echo "DOCKER_IMAGE_SHA=${{ github.sha }}" >> $GITHUB_ENV

diff --git a/.github/workflows/publish-docker.yml b/.github/workflows/publish-docker.yml
@@ -12,20 +12,18 @@ on:
     paths-ignore:
       - 'docs/**'
       - '**/*.md'
-  pull_request_target:
+  pull_request:
     paths-ignore:
       - 'docs/**'
       - '**/*.md'
 
 jobs:
   buildAndPush:
-    runs-on:
-      labels: self-hosted
-      group: organization/default
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
         with:
-          ref: ${{ github.event_name == 'release' && github.ref || github.event_name == 'push' && github.ref || github.event_name == 'pull_request_target' && github.event.pull_request.head.ref || github.event_name == 'pull_request' && github.event.pull_request.head.ref }}
+          ref: ${{ github.event_name == 'release' && github.ref || github.event_name == 'push' && github.ref || github.event_name == 'pull_request' && github.event.pull_request.head.ref || github.event_name == 'pull_request' && github.event.pull_request.head.ref }}
       - uses: docker/metadata-action@v5
         id: meta
         with:

diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml
@@ -4,7 +4,7 @@ on:
   push:
     branches:
       - main
-  pull_request_target:
+  pull_request:
     types: [ opened, reopened, synchronize ]
 
 jobs:

diff --git a/.github/workflows/size-label.yml b/.github/workflows/size-label.yml
@@ -1,14 +1,18 @@
 name: Size Label
 
 on:
-  pull_request_target:
-    types: [ assigned, opened, synchronize, reopened ]
+  pull_request:
+    types:
+      - opened
+      - edited
+      - synchronize
 
 jobs:
   size-label:
-    runs-on:
-      labels: self-hosted
-      group: organization/default
+    permissions:
+      contents: read
+      pull-requests: write
+    runs-on: ubuntu-latest
     steps:
       - name: size-label
         uses: pascalgn/[email protected]