File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 1+ name : Code PushUp (fork)
2+
3+ # separated from code-pushup.yml for security reasons
4+ # => requires permissions to create PR comment
5+ # => for PRs from forks, needs to run on `pull_request_target`, not `pull_request`
6+ # => `pull_request_target` is a security risk when secrets are being used
7+ # => secrets needed for code-pushup upload
8+ # => code-pushup for forks runs in separate workflow with no secrets access
9+
10+ on :
11+ pull_request_target :
12+ branches : [main]
13+
14+ env :
15+ NX_NON_NATIVE_HASHER : true
16+
17+ permissions :
18+ pull-requests : write
19+
20+ jobs :
21+ code-pushup :
22+ runs-on : ubuntu-latest
23+ name : Code PushUp
24+ if : github.event.pull_request.head.repo.fork
25+ steps :
26+ - name : Checkout repository
27+ uses : actions/checkout@v4
28+ - name : Set up Node.js
29+ uses : actions/setup-node@v4
30+ with :
31+ node-version-file : .nvmrc
32+ cache : npm
33+ - name : Install dependencies
34+ run : npm ci
35+ - name : Run Code PushUp action
36+ uses : code-pushup/github-action@v0
37+ with :
38+ bin : npx nx code-pushup-old --
Original file line number Diff line number Diff line change 1+ name : Code PushUp
2+
3+ on :
4+ push :
5+ branches : [main]
6+ pull_request :
7+ branches : [main]
8+
9+ env :
10+ NX_NON_NATIVE_HASHER : true
11+
12+ permissions :
13+ pull-requests : write
14+
15+ jobs :
16+ code-pushup :
17+ runs-on : ubuntu-latest
18+ name : Code PushUp
19+ # ignore PRs from forks, handled by code-pushup-fork.yml
20+ if : ${{ !github.event.pull_request.head.repo.fork }}
21+ env :
22+ CP_SERVER : ${{ secrets.CP_SERVER }}
23+ CP_API_KEY : ${{ secrets.CP_API_KEY }}
24+ CP_ORGANIZATION : code-pushup
25+ CP_PROJECT : cli
26+ steps :
27+ - name : Checkout repository
28+ uses : actions/checkout@v4
29+ - name : Set up Node.js
30+ uses : actions/setup-node@v4
31+ with :
32+ node-version-file : .nvmrc
33+ cache : npm
34+ - name : Install dependencies
35+ run : npm ci
36+ - name : Run Code PushUp action
37+ uses : code-pushup/github-action@v0
38+ with :
39+ bin : npx nx code-pushup --
Original file line number Diff line number Diff line change 3636 - name : Run Code PushUp action
3737 uses : code-pushup/github-action@v0
3838 with :
39- bin : npx nx code-pushup --
39+ bin : npx nx affected -t code-pushup
You can’t perform that action at this time.
0 commit comments