Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ci: run coverage jobs in pull_request_target context #4483

Merged
merged 1 commit into from
Aug 24, 2024

Conversation

davidhewitt
Copy link
Member

Moves the coverage task to a separate ci task which runs on the pull_request_target trigger. This ensures that coverage runs against the original branch and compares to its base. The rest of our jobs run on the merge commit so pick up CI fixes from main, but codecov seems to get confused about how to calculate the merge base correctly so we get strange job failures.

Replaces #4472

@davidhewitt davidhewitt added the CI-skip-changelog Skip checking changelog entry label Aug 24, 2024
@davidhewitt
Copy link
Member Author

Need to merge this to see if it worked, because pull_request_target uses the CI file from the merge base, which currently lacks this job.

@davidhewitt davidhewitt added this pull request to the merge queue Aug 24, 2024
Merged via the queue into PyO3:main with commit 44c16ec Aug 24, 2024
38 of 39 checks passed
@davidhewitt davidhewitt deleted the codecov-diff branch August 24, 2024 09:31
@alex
Copy link
Contributor

alex commented Aug 24, 2024

In general, pull_request_target has some security issues, and I think this may implicate them https://securitylab.github.com/resources/github-actions-preventing-pwn-requests/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
CI-skip-changelog Skip checking changelog entry
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants