-
Notifications
You must be signed in to change notification settings - Fork 442
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add conditional checks to prevent scheduled actions running inside forked repositories #2317
Conversation
Important Auto Review SkippedAuto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the To trigger a single review, invoke the WalkthroughThe recent updates to the GitHub workflows introduce conditional execution based on repository checks. Jobs within various workflows now include a prerequisite that they will only run if the repository matches 'zenml-io/zenml'. This ensures that workflow actions such as analyzing code, posting data, nightly builds, labeling pull requests, publishing packages, and updating documents are specifically tailored for the ZenML repository, avoiding unintended executions in forks or other repositories. Changes
Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media? TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (invoked as PR comments)
Additionally, you can add CodeRabbit Configration File (
|
@coderabbitai review |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Review Status
Actionable comments generated: 0
Configuration used: .coderabbit.yaml
Files selected for processing (11)
- .github/workflows/codeql.yml (1 hunks)
- .github/workflows/mixpanel-test-data.yml (1 hunks)
- .github/workflows/nightly_build.yml (1 hunks)
- .github/workflows/pr_labeler.yml (1 hunks)
- .github/workflows/publish_api_docs.yml (1 hunks)
- .github/workflows/release.yml (2 hunks)
- .github/workflows/replace_api_docs_version (1 hunks)
- .github/workflows/spellcheck.yml (1 hunks)
- .github/workflows/templates-test.yml (1 hunks)
- .github/workflows/trivy-zenml-core.yml (1 hunks)
- .github/workflows/trivy-zenserver.yml (1 hunks)
Additional comments: 16
.github/workflows/pr_labeler.yml (1)
- 10-10: The addition of the conditional check
if: github.repository == 'zenml-io/zenml'
is correct and aligns with the PR's objective to restrict actions to the main repository..github/workflows/trivy-zenml-core.yml (1)
- 11-11: The addition of the conditional check
if: github.repository == 'zenml-io/zenml'
is correct and aligns with the PR's objective to restrict actions to the main repository..github/workflows/trivy-zenserver.yml (1)
- 11-11: The addition of the conditional check
if: github.repository == 'zenml-io/zenml'
is correct and aligns with the PR's objective to restrict actions to the main repository..github/workflows/spellcheck.yml (1)
- 18-18: The addition of the conditional check
if: github.event.pull_request.draft == false && github.repository == 'zenml-io/zenml'
is correct and aligns with the PR's objective to restrict actions to the main repository..github/workflows/mixpanel-test-data.yml (1)
- 10-10: The addition of the conditional check
if: github.repository == 'zenml-io/zenml'
is correct and aligns with the PR's objective to restrict actions to the main repository..github/workflows/nightly_build.yml (4)
- 16-16: The addition of the conditional check
if: github.repository == 'zenml-io/zenml'
for thesetup-and-test
job is correct and aligns with the PR's objective.- 21-21: The addition of the conditional check
if: github.repository == 'zenml-io/zenml'
for thepublish-python-package
job is correct and aligns with the PR's objective.- 23-23: The addition of the conditional check
if: github.repository == 'zenml-io/zenml'
for thewait-for-package-release
job is correct and aligns with the PR's objective.- 31-31: The addition of the conditional check
if: github.repository == 'zenml-io/zenml'
for thepublish-docker-image
job is correct and aligns with the PR's objective..github/workflows/publish_api_docs.yml (1)
- 9-9: The addition of the conditional check
if: github.repository == 'zenml-io/zenml'
for thepublish
job is correct and aligns with the PR's objective to restrict actions to the main repository..github/workflows/codeql.yml (1)
- 12-12: The addition of the conditional check
if: github.event.pull_request.draft == false && github.repository == 'zenml-io/zenml'
for theanalyze
job is correct and aligns with the PR's objective to restrict actions to the main repository..github/workflows/replace_api_docs_version (1)
- 11-11: The addition of the conditional check
if: github.repository == 'zenml-io/zenml'
for theupdate_docs
job is correct and aligns with the PR's objective to restrict actions to the main repository..github/workflows/templates-test.yml (1)
- 45-46: The addition of the conditional check
if: ${{ ! startsWith(github.event.head_commit.message, 'GitBook:') }} && github.repository == 'zenml-io/zenml'
for theall-template-tests
job is correct and aligns with the PR's objective to restrict actions to the main repository..github/workflows/release.yml (3)
- 65-65: The addition of the conditional check
if: github.repository == 'zenml-io/zenml'
for thepublish-python-package
job is correct and aligns with the PR's objective.- 82-82: The addition of the conditional check
if: github.repository == 'zenml-io/zenml'
for thepublish-docker-image
job is correct and aligns with the PR's objective.- 87-87: The addition of the conditional check
if: github.repository == 'zenml-io/zenml'
for thepublish-helm-chart
job is correct and aligns with the PR's objective.
Quickstart template updates in |
E2E template updates in |
NLP template updates in |
…rked repositories (zenml-io#2317) * add conditioal check for forks * Auto-update of Starter template * Auto-update of E2E template * Auto-update of NLP template --------- Co-authored-by: GitHub Actions <[email protected]>
…rked repositories (zenml-io#2317) * add conditioal check for forks * Auto-update of Starter template * Auto-update of E2E template * Auto-update of NLP template --------- Co-authored-by: GitHub Actions <[email protected]>
Some of our scheduled actions are currently running on forked repositories. They are failing (mainly due to missing passwords etc) but still we should confine these to just running from within ZenML. Added some other conditionals in places where it seemed to make sense that we'd want to prevent these from running outside as well.
Summary by CodeRabbit
zenml-io/zenml
).