Unverified Commit 385d8497 authored by Hong Minhee's avatar Hong Minhee
Browse files

Conditional provenance flags for PR builds 

Add `--no-provenance` flag to `deno task publish` commands when triggered
by pull_request_target events to handle provenance generation differences
in PR builds versus main branch builds.
parent 978d1368

.github/workflows/build.yaml

+10 −2
Original line number Diff line number Diff line
@@ -278,9 +278,17 @@ jobs: 
          fedify/fedify-fedify-*.tgz

          cli/fedify-cli-*

        generate_release_notes: false

    - run: deno task publish --allow-dirty

    - if: github.event_name == 'pull_request_target'

      run: deno task publish --allow-dirty --no-provenance

      working-directory: ${{ github.workspace }}/fedify/

    - if: github.event_name != 'pull_request_target'

      run: deno task publish --allow-dirty

      working-directory: ${{ github.workspace }}/fedify/

    - run: deno task publish --allow-dirty

    - if: github.event_name == 'pull_request_target'

      run: deno task publish --allow-dirty --no-provenance

      working-directory: ${{ github.workspace }}/cli/

    - if: github.event_name != 'pull_request_target'

      run: deno task publish --allow-dirty

      working-directory: ${{ github.workspace }}/cli/

    - run: |

        set -ex