roryqi commented on PR #13049:
URL: https://github.com/apache/gravitino/pull/13049#issuecomment-5679354113

   Added downstream-repository isolation for the fork CI flow:
   
   - `fork-ci.yml` now verifies that the push is either an Apache Gravitino 
branch or an exact open PR head from the `apache/gravitino` fork network before 
fanning out the suites.
   - `checkout-and-sync` no longer falls back to `apache/gravitino:main` when 
no exact PR matches. Unrelated downstream repositories keep their current 
checkout and do not sync.
   - The trusted status workflows are guarded to run only in `apache/gravitino`.
   - Downstream mirrors can set the repository variable `DISABLE_FORK_CI=true` 
to keep the inherited Fork CI entry point completely dormant.
   
   Validation:
   
   - `actionlint v1.7.12` passes for all workflow files.
   - The first live run exposed that the `vars` context is unavailable inside a 
composite action manifest; commit `b25aaffb8` removed that use.
   - The follow-up [live fork 
run](https://github.com/qqqttt123/gravitino/actions/runs/34962525406) passed 
the new eligibility job and checkout/sync stages; the test matrix is still 
running.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to