ci: remove PR target

Azure · Jan 20, 2025 · fd4e44c · fd4e44c
1 parent 332703d
commit fd4e44c
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 11 deletions.
diff --git a/.github/workflows/go-test-deployment.yml b/.github/workflows/go-test-deployment.yml
@@ -2,7 +2,7 @@
 name: Deployment test
 
 on:
-  pull_request_target:
+  pull_request:
     types: ['opened', 'reopened', 'synchronize', 'labeled']
   workflow_dispatch:
     inputs:
@@ -36,7 +36,13 @@ jobs:
     if: |
       (
         (
-          contains(github.event.pull_request.labels.*.name, 'PR: Safe to test :test_tube:')
+          (
+            contains(github.event.pull_request.labels.*.name, 'PR: Safe to test :test_tube:')
+          )
+          &&
+          (
+            github.event.pull_request.head.repo.full_name == 'Azure/terraform-azurerm-lz-vending'
+          )
         )
         ||
         (
@@ -57,7 +63,6 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
-          ref: ${{ github.event.pull_request.head.sha }}
           persist-credentials: false
 
       - name: Setup Terraform

diff --git a/.github/workflows/go-test-unit.yml b/.github/workflows/go-test-unit.yml
@@ -2,7 +2,7 @@
 name: Unit test
 
 on:
-  pull_request_target:
+  pull_request:
     types: ['opened', 'reopened', 'synchronize', 'labeled']
   merge_group:
   workflow_dispatch:
@@ -40,12 +40,6 @@ jobs:
         github.event.pull_request.head.repo.full_name == 'Azure/terraform-azurerm-lz-vending'
       )
       ||
-      (
-        github.event.pull_request.head.repo.full_name != 'Azure/terraform-azurerm-lz-vending'
-        &&
-        contains(github.event.pull_request.labels.*.name, 'PR: Safe to test :test_tube:')
-      )
-      ||
       (
         github.event_name == 'workflow_dispatch'
       )
@@ -63,7 +57,6 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
-          ref: ${{ github.event.pull_request.head.sha }}
           persist-credentials: false
 
       - name: Setup Terraform