From 9d6a3e92143d2302a3d95f7442c0e78e3ad22bfb Mon Sep 17 00:00:00 2001 From: Derek Visch Date: Fri, 22 May 2026 12:51:54 -0400 Subject: [PATCH] Remove ci.yml: pull_request_target with unprotected 'external' environment --- .github/workflows/ci.yml | 54 ---------------------------------------- 1 file changed, 54 deletions(-) delete mode 100644 .github/workflows/ci.yml diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml deleted file mode 100644 index 50610a21..00000000 --- a/.github/workflows/ci.yml +++ /dev/null @@ -1,54 +0,0 @@ -name: CI -on: - push: - branches: - - main - pull_request_target: - types: [opened, synchronize, reopened] -jobs: - build: - runs-on: ${{ matrix.os }} - strategy: - matrix: - python-version: [3.8, 3.9, "3.10"] - os: [ubuntu-latest, windows-latest, macos-latest] - steps: - - uses: actions/checkout@v2 - - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v2 - with: - python-version: ${{ matrix.python-version }} - - name: Install dependencies - run: | - python -m pip install --upgrade pip - pip install poetry==1.1.12 - - name: Build tap on Python ${{ matrix.python-version }} - run: poetry build - authorize: - environment: ${{ github.event_name == 'pull_request_target' && github.event.pull_request.head.repo.full_name != github.repository && 'external' || 'internal' }} - runs-on: ubuntu-latest - steps: - - run: true - test: - needs: authorize - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v2 - - name: Setup Python 3.9 - uses: actions/setup-python@v2 - with: - python-version: 3.9 - - name: Install dependencies - run: | - python -m pip install --upgrade pip - pip install poetry==1.1.12 - poetry install - - name: Test tap-googleads - run: poetry run tox - env: - TAP_GOOGLEADS_CLIENT_ID: ${{ secrets.TAP_GOOGLEADS_CLIENT_ID }} - TAP_GOOGLEADS_CLIENT_SECRET: ${{ secrets.TAP_GOOGLEADS_CLIENT_SECRET }} - TAP_GOOGLEADS_CUSTOMER_ID: ${{ secrets.TAP_GOOGLEADS_CUSTOMER_ID }} - TAP_GOOGLEADS_REFRESH_TOKEN: ${{ secrets.TAP_GOOGLEADS_REFRESH_TOKEN }} - TAP_GOOGLEADS_DEVELOPER_TOKEN: ${{ secrets.TAP_GOOGLEADS_DEVELOPER_TOKEN }} - TAP_GOOGLEADS_LOGIN_CUSTOMER_ID: ${{ secrets.TAP_GOOGLEADS_LOGIN_CUSTOMER_ID }}