Skip to content

fix(Nightly-build): checkout ref expression #1629

Merged
UnschooledGamer merged 101 commits intoAcode-Foundation:mainfrom
UnschooledGamer:ci/nightly-builds
Oct 8, 2025
Merged

fix(Nightly-build): checkout ref expression #1629
UnschooledGamer merged 101 commits intoAcode-Foundation:mainfrom
UnschooledGamer:ci/nightly-builds

Conversation

@UnschooledGamer
Copy link
Member

@UnschooledGamer UnschooledGamer commented Oct 8, 2025

  • resolve merge conflicts 😶

UnschooledGamer and others added 30 commits September 21, 2025 13:09
As GitHub doesn't like reusable workflows in steps
UnschooledGamer and others added 29 commits September 23, 2025 16:03
…s()` alongside now.

These commit fixes job failure comment always triggering and posting failure comments regardless if build workflow succeeds
# Conflicts:
#	.github/workflows/nightly-build.yml
#	.github/workflows/on-demand-preview-releases-PR.yml
…ll_request.

Important: `pull_request_target` makes the `on-demand-preview-releases-PR.yml` run from base repository with secrets and gives read/write permissions to `$GITHUB_TOKEN` (`secrets.GITHUB_TOKEN`). Unlike normal `pull_request` trigger that has explicit read-ONLY permissions for `$GITHUB_TOKEN`. Meaning secrets and permissions SHOULD BE NOW handled strictly!

Changes:

- checkout `${{ github.event.pull_request.head.sha }}` & sets `persist-credentials: false` to not persist tokens in local git config.
- Adds `skip_tagging_and_releases` input for nightly-build.yml Manual Runs (default: true)
- Adds `CODEOWNERS` file to protect nightly builds and on demand workflows, preventing pushes in PRs without reviews from Authors of the workflow.
@UnschooledGamer UnschooledGamer merged commit b2b1051 into Acode-Foundation:main Oct 8, 2025
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant