disable google auth for PRs, forks and dependabot

centrifuge · Nov 29, 2023 · 1366fc8 · 1366fc8
1 parent 27c8cc0
commit 1366fc8
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 3 deletions.
diff --git a/.github/actions/prep-ubuntu/action.yml b/.github/actions/prep-ubuntu/action.yml
@@ -29,12 +29,20 @@ runs:
       shell: sh
       run: scripts/install_toolchain.sh
 
+    - name: Disable cache on forks and dependabot
+      if:  github.event_name == 'pull_request'
+      shell: sh
+      run: |
+        if [ "${{ github.event.pull_request.head.repo.fork }}" == "true" ] || \
+           [ "${{ github.actor }}" == "dependabot[bot]" ] || \
+           [ "${{ github.actor }}" == "dependabot-preview[bot]" ]; then
+          echo "disable_cache=true" >> $GITHUB_ENV
+        fi
+
     - name: SCcache setup
-      if: ${{ inputs.cache == 'enabled' }}
+      if: ${{ inputs.cache == 'enabled' && !env.disable_cache }}
       uses: ./.github/actions/sccache-gcloud
       with:
         GWIP: ${{ inputs.GWIP }}
         GSA: ${{ inputs.GSA }}
 
-
-
diff --git a/.github/workflows/build-wasm.yml b/.github/workflows/build-wasm.yml
@@ -75,6 +75,7 @@ jobs:
           path: ./${{ matrix.package }}-srtool-wasm-report.json      
 
       - id: 'auth'
+        if: github.event_name != 'pull_request'
         uses: 'google-github-actions/auth@67e9c72af6e0492df856527b474995862b7b6591' # v2.0.0
         with:
           workload_identity_provider: ${{ secrets.GWIP_ARTIFACTS }}