From 9acd81f752a9e8d69de06ba63c675a764038eeac Mon Sep 17 00:00:00 2001 From: Chris Markiewicz Date: Wed, 14 Aug 2024 08:24:10 -0400 Subject: [PATCH] chore(ci): Disable attestation for fork PRs --- .github/workflows/build-test-deploy.yml | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/.github/workflows/build-test-deploy.yml b/.github/workflows/build-test-deploy.yml index b38d516..38b78c3 100644 --- a/.github/workflows/build-test-deploy.yml +++ b/.github/workflows/build-test-deploy.yml @@ -1,7 +1,5 @@ on: push: - branches: [main] - tags: ["*"] pull_request: branches: [main] release: @@ -40,7 +38,8 @@ jobs: fetch-depth: 0 - uses: hynek/build-and-inspect-python-package@v2 with: - attest-build-provenance-github: 'true' + # Use attestation only if the action is triggered inside the repo + attest-build-provenance-github: ${{ github.event.action == 'published' || github.event_name == 'push' }} test: runs-on: ${{ matrix.os }}