Skip to content

chore!: forward-merge v4.2-dev into v5.0-dev #7

chore!: forward-merge v4.2-dev into v5.0-dev

chore!: forward-merge v4.2-dev into v5.0-dev #7

name: Runner image candidate

Check warning on line 1 in .github/workflows/runner-image-candidate.yml

View workflow run for this annotation

GitHub Actions / Runner image candidate

Workflow execution policy warning (evaluate mode)

On November 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target
on:
pull_request_target:
types: [opened, synchronize, reopened, ready_for_review, closed]
branches: [master, 'v*-dev', 'ci/*']
paths: ['.github/runner-requirements.json']
# This is trusted base-branch orchestration. Never check out PR code or select
# the control revision from PR data. Build/publish execute on separate hosted VMs.
permissions:
contents: read
pull-requests: read
actions: read
statuses: write
concurrency:
group: ${{ github.event.action == 'closed' && format('runner-image-promote-{0}', github.event.pull_request.base.ref) || format('runner-image-pr-{0}', github.event.pull_request.number) }}
cancel-in-progress: ${{ github.event.action != 'closed' }}
jobs:
image:
if: >-
(github.event.action != 'closed' && !github.event.pull_request.draft)
|| (github.event.action == 'closed' && github.event.pull_request.merged)
uses: dashpay/dash-selfhosted-image/.github/workflows/platform-candidate.yml@07811cd919f6956ba9c6d69a3a1bff4550eb3761
with:
pull_request: ${{ github.event.pull_request.number }}
control_revision: 07811cd919f6956ba9c6d69a3a1bff4550eb3761
mode: ${{ github.event.action == 'closed' && 'promote' || 'candidate' }}
secrets:
DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}