Skip to content

ci: skip the release job on pull requests from forks - #637

Merged
0x676e67 merged 1 commit into
0x676e67:mainfrom
alkaz-nodemaven:ci/skip-release-on-fork-prs
Oct 6, 2026
Merged

0x676e67 merged 1 commit into
0x676e67:mainfrom
alkaz-nodemaven:ci/skip-release-on-fork-prs

Conversation

@alkaz-nodemaven

Copy link
Copy Markdown
Contributor

The Release job fails on every pull request from a fork, at Generate artifact attestation:

Error: missing "id-token" permission.

Fork PRs get a read-only GITHUB_TOKEN and no OIDC token, whatever the job
declares, so that step can't pass there. It happened on #614 and on
https://github.com/0x676e67/wreq-python/actions/runs/36418255220, both with the
rest of the build green, so an outside contributor sees a red check they can't
fix.

This adds a job-level if: the job still runs on tag pushes and on pull
requests from branches in this repository, including the attestation and the
uv publish --dry-run, and is skipped on fork PRs. Publishing is unchanged.

@0x676e67
0x676e67 merged commit 6451ed5 into 0x676e67:main Oct 6, 2026
19 of 33 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants