mirror of
https://github.com/actualbudget/actual.git
synced 2026-03-21 15:36:50 -05:00
2108712f2d
This PR moves the size comparison action back to a separate workflow which now uses the `pull_request_target` event. This event is triggered at all the same times as the `pull_request` action, except that the workflow file content comes from the target branch of the PR, and it is run in the context of the repo owning the target branch. Practically, this means that it will still have access to post a comment even if the PR comes from a fork. We don’t want the build actions to be run in a `pull_request_target` workflow because they would get access to the secrets and be able to perform arbitrary actions on the repository, even from fork PRs. See the current version failing here: https://github.com/actualbudget/actual/actions/runs/5395184895/jobs/9797388016?pr=1122
67 lines
1.6 KiB
YAML
67 lines
1.6 KiB
YAML
name: Build
|
|
|
|
defaults:
|
|
run:
|
|
shell: bash
|
|
|
|
env:
|
|
CI: true
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- master
|
|
pull_request:
|
|
|
|
jobs:
|
|
api:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- name: Set up environment
|
|
uses: ./.github/actions/setup
|
|
- name: Build API
|
|
run: cd packages/api && yarn build
|
|
- name: Create package tgz
|
|
run: cd packages/api && yarn pack && mv package.tgz actual-api.tgz
|
|
- name: Upload Build
|
|
uses: actions/upload-artifact@v3
|
|
with:
|
|
name: actual-api
|
|
path: packages/api/actual-api.tgz
|
|
|
|
crdt:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- name: Set up environment
|
|
uses: ./.github/actions/setup
|
|
- name: Build CRDT
|
|
run: cd packages/crdt && yarn build
|
|
- name: Create package tgz
|
|
run: cd packages/crdt && yarn pack && mv package.tgz actual-crdt.tgz
|
|
- name: Upload Build
|
|
uses: actions/upload-artifact@v3
|
|
with:
|
|
name: actual-crdt
|
|
path: packages/crdt/actual-crdt.tgz
|
|
|
|
web:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- name: Set up environment
|
|
uses: ./.github/actions/setup
|
|
- name: Build Web
|
|
run: ./bin/package-browser
|
|
- name: Upload Build
|
|
uses: actions/upload-artifact@v3
|
|
with:
|
|
name: actual-web
|
|
path: packages/desktop-client/build
|
|
- name: Upload Build Stats
|
|
uses: actions/upload-artifact@v3
|
|
with:
|
|
name: build-stats
|
|
path: packages/desktop-client/build-stats
|