roryqi commented on PR #13049: URL: https://github.com/apache/gravitino/pull/13049#issuecomment-5679354113
Added downstream-repository isolation for the fork CI flow: - `fork-ci.yml` now verifies that the push is either an Apache Gravitino branch or an exact open PR head from the `apache/gravitino` fork network before fanning out the suites. - `checkout-and-sync` no longer falls back to `apache/gravitino:main` when no exact PR matches. Unrelated downstream repositories keep their current checkout and do not sync. - The trusted status workflows are guarded to run only in `apache/gravitino`. - Downstream mirrors can set the repository variable `DISABLE_FORK_CI=true` to keep the inherited Fork CI entry point completely dormant. Validation: - `actionlint v1.7.12` passes for all workflow files. - The first live run exposed that the `vars` context is unavailable inside a composite action manifest; commit `b25aaffb8` removed that use. - The follow-up [live fork run](https://github.com/qqqttt123/gravitino/actions/runs/34962525406) passed the new eligibility job and checkout/sync stages; the test matrix is still running. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
