This is an automated email from the ASF dual-hosted git repository.

anton-vinogradov pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ignite.git


The following commit(s) were added to refs/heads/master by this push:
     new 3a5cf3f1fdc IGNITE-28827 Run all PR checks even when the PR conflicts 
with the base branch (#13287)
3a5cf3f1fdc is described below

commit 3a5cf3f1fdcbef074451e9c4ab220bd9e734355b
Author: Anton Vinogradov <[email protected]>
AuthorDate: Mon Jul 13 20:45:12 2026 +0300

    IGNITE-28827 Run all PR checks even when the PR conflicts with the base 
branch (#13287)
---
 .github/workflows/commit-check.yml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/commit-check.yml 
b/.github/workflows/commit-check.yml
index d98eb6be2b3..3dc4cbbae05 100644
--- a/.github/workflows/commit-check.yml
+++ b/.github/workflows/commit-check.yml
@@ -14,8 +14,12 @@
 # limitations under the License.
 
 name: Code Style, Abandoned Tests, Javadocs
+
+# pull_request_target (not pull_request) so the checks also run when the PR 
conflicts with the base
+# branch. These jobs build and run untrusted PR code: keep the token read-only 
and add no secrets
+# here, otherwise a fork PR could read them.
 on:
-  pull_request:
+  pull_request_target:
   push:
     branches:
       - master
@@ -25,6 +29,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || 
github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   check-java:
     runs-on: ubuntu-latest

Reply via email to