Skip to content

Commit a17715c

Browse files
committed
Add permission checking before checkout
1 parent 35136de commit a17715c

File tree

1 file changed

+31
-0
lines changed

1 file changed

+31
-0
lines changed

.github/workflows/testing-farm.yaml

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,21 @@ jobs:
1616
statuses: write
1717

1818
steps:
19+
- name: Get User Permission
20+
id: checkAccess
21+
uses: actions-cool/check-user-permission@v2
22+
with:
23+
require: write
24+
username: ${{ github.triggering_actor }}
25+
env:
26+
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
27+
- name: Check User Permission
28+
if: steps.checkAccess.outputs.require-result == 'false'
29+
run: |
30+
echo "${{ github.triggering_actor }} does not have permissions on this repo."
31+
echo "Current permission level is ${{ steps.checkAccess.outputs.user-permission }}"
32+
echo "Job originally triggered by ${{ github.actor }}"
33+
exit 1
1934
- name: Checkout repository
2035
uses: actions/checkout@v4
2136
with:
@@ -41,6 +56,22 @@ jobs:
4156
statuses: write
4257

4358
steps:
59+
- name: Get User Permission
60+
id: checkAccess
61+
uses: actions-cool/check-user-permission@v2
62+
with:
63+
require: write
64+
username: ${{ github.triggering_actor }}
65+
env:
66+
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
67+
- name: Check User Permission
68+
if: steps.checkAccess.outputs.require-result == 'false'
69+
run: |
70+
echo "${{ github.triggering_actor }} does not have permissions on this repo."
71+
echo "Current permission level is ${{ steps.checkAccess.outputs.user-permission }}"
72+
echo "Job originally triggered by ${{ github.actor }}"
73+
exit 1
74+
4475
- name: Checkout repository
4576
uses: actions/checkout@v4
4677
with:

0 commit comments

Comments
 (0)