fix(ci): disable dependency review in forks (#560)

Correction to ensure that the “Dependency Review” job is only run in the project's original repository. Fix: 8cb9fc2. Fix: 9fe355a. Signed-off-by: Claudio André <[email protected]>
openwall · Nov 15, 2024 · e9ac0ea · e9ac0ea
1 parent 886e499
commit e9ac0ea
Showing 1 changed file with 12 additions and 5 deletions.
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -38,10 +38,10 @@ permissions:
 
 jobs:
   dependency-review:
-    if: ${{ github.repository == 'openwall/john-packages' }}
     runs-on: ubuntu-latest
     name: dependency-review
 
+    # if: github.event.pull_request.head.repo.full_name
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
@@ -54,7 +54,14 @@ jobs:
             api.securityscorecards.dev:443
             github.com:443
 
-      - name: "Checkout Repository"
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: "Dependency Review"
-        uses: actions/dependency-review-action@4081bf99e2866ebe428fc0477b69eb4fcda7220a # v4.4.0
+      - name: Dump GitHub context
+        env:
+          GITHUB_CONTEXT: ${{ toJson(github) }}
+        run: |
+            echo ${{ github.event.pull_request.base.repo.full_name }}
+            echo ${{ github.event.pull_request.head.repo.full_name }}
+
+      # - name: "Checkout Repository"
+      #   uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      # - name: "Dependency Review"
+      #   uses: actions/dependency-review-action@4081bf99e2866ebe428fc0477b69eb4fcda7220a # v4.4.0