drone-fork-approval

Drone CI validation extension to ensures that any PR originating from a fork must be manually approved before it is executed. This extension is a reimplementation of drone-plugins/drone-docker.

Usage

Create a shared secret:

$ openssl rand -hex 16
bea26a2221fd8090ea38720fc445eca6

Download and run the plugin:

$ docker run -d \
  --publish=3000:3000 \
  --env=DRONE_FORK_APPROVAL_BIND=:3000 \
  --env=DRONE_FORK_APPROVAL_SECRET=bea26a2221fd8090ea38720fc445eca6 \
  --env=DRONE_FORK_APPROVAL_LOG_LEVEL=Info \
  --restart=always \
  --name=fork-approval owncloudci/drone-fork-approval

Update the Drone server configuration to include the plugin address and the shared secret.

DRONE_VALIDATE_PLUGIN_ENDPOINT=http://127.0.0.1:3000
DRONE_VALIDATE_PLUGIN_SECRET=bea26a2221fd8090ea38720fc445eca6

Build

Build the binary with the following command:

make build

Build the Docker image with the following command:

docker build --file Dockerfile.multiarch --tag owncloudci/drone-fork-approval .

Releases

Create and push the new tag to trigger the CI release process:

git tag v2.10.3
git push origin v2.10.3

License

This project is licensed under the Apache 2.0 License - see the LICENSE file for details.

Copyright

Copyright (c) 2023 ownCloud GmbH