release-prs: do the label check everywhere

DeterminateSystems · Apr 8, 2024 · 215cc3e · 215cc3e
1 parent 740dd50
commit 215cc3e
Showing 1 changed file with 36 additions and 0 deletions.
diff --git a/.github/workflows/release-prs.yml b/.github/workflows/release-prs.yml
@@ -13,18 +13,54 @@ on:
 
 jobs:
   build-x86_64-linux:
+    # Only intra-repo PRs are allowed to have PR artifacts uploaded
+    # We only want to trigger once the upload once in the case the upload label is added, not when any label is added
+    if: |
+      always() && !failure() && !cancelled()
+      && github.event.pull_request.head.repo.full_name == 'DeterminateSystems/nix-installer'
+      && (
+        (github.event.action == 'labeled' && github.event.label.name == 'upload to s3')
+        || (github.event.action != 'labeled' && contains(github.event.pull_request.labels.*.name, 'upload to s3'))
+      )
     uses: ./.github/workflows/build-x86_64-linux.yml
     with:
       cache-key: release-x86_64-linux-artifacts-${{ github.sha }}
   build-aarch64-linux:
+    # Only intra-repo PRs are allowed to have PR artifacts uploaded
+    # We only want to trigger once the upload once in the case the upload label is added, not when any label is added
+    if: |
+      always() && !failure() && !cancelled()
+      && github.event.pull_request.head.repo.full_name == 'DeterminateSystems/nix-installer'
+      && (
+        (github.event.action == 'labeled' && github.event.label.name == 'upload to s3')
+        || (github.event.action != 'labeled' && contains(github.event.pull_request.labels.*.name, 'upload to s3'))
+      )
     uses: ./.github/workflows/build-aarch64-linux.yml
     with:
       cache-key: release-aarch64-linux-artifacts-${{ github.sha }}
   build-x86_64-darwin:
+    # Only intra-repo PRs are allowed to have PR artifacts uploaded
+    # We only want to trigger once the upload once in the case the upload label is added, not when any label is added
+    if: |
+      always() && !failure() && !cancelled()
+      && github.event.pull_request.head.repo.full_name == 'DeterminateSystems/nix-installer'
+      && (
+        (github.event.action == 'labeled' && github.event.label.name == 'upload to s3')
+        || (github.event.action != 'labeled' && contains(github.event.pull_request.labels.*.name, 'upload to s3'))
+      )
     uses: ./.github/workflows/build-x86_64-darwin.yml
     with:
       cache-key: release-x86_64-darwin-artifacts-${{ github.sha }}
   build-aarch64-darwin:
+    # Only intra-repo PRs are allowed to have PR artifacts uploaded
+    # We only want to trigger once the upload once in the case the upload label is added, not when any label is added
+    if: |
+      always() && !failure() && !cancelled()
+      && github.event.pull_request.head.repo.full_name == 'DeterminateSystems/nix-installer'
+      && (
+        (github.event.action == 'labeled' && github.event.label.name == 'upload to s3')
+        || (github.event.action != 'labeled' && contains(github.event.pull_request.labels.*.name, 'upload to s3'))
+      )
     uses: ./.github/workflows/build-aarch64-darwin.yml
     with:
       cache-key: release-aarch64-darwin-artifacts-${{ github.sha }}