summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorYuriy Andamasov <yuriy@andamasov.com>2026-06-01 12:40:05 +0300
committerGitHub <noreply@github.com>2026-06-01 12:40:05 +0300
commit6b2a9365a98dded11f0d76f412cd1f9e83349b05 (patch)
treeccd806825b32321f46b9e2c46fc205659daad017
parentc2c1b8c69ab612adfec4fc8542e2a4183814c986 (diff)
parenta69874bbbf32562f8bb177a81d71d0a0d5611c47 (diff)
downloadvyatta-biosdevname-6b2a9365a98dded11f0d76f412cd1f9e83349b05.tar.gz
vyatta-biosdevname-6b2a9365a98dded11f0d76f412cd1f9e83349b05.zip
Merge pull request #20 from vyos/ci/lts-name-check
T8943: ci: add lts-name-check advisory caller
-rw-r--r--.github/workflows/lts-name-check.yml21
1 files changed, 21 insertions, 0 deletions
diff --git a/.github/workflows/lts-name-check.yml b/.github/workflows/lts-name-check.yml
new file mode 100644
index 0000000..91fd9b5
--- /dev/null
+++ b/.github/workflows/lts-name-check.yml
@@ -0,0 +1,21 @@
+# .github/workflows/lts-name-check.yml
+# DO NOT EDIT — managed by mirror-pipeline rollout.
+name: LTS-name advisory check
+
+# pull_request_target (NOT pull_request) so the workflow runs with base-repo
+# secrets even on fork PRs. The reusable workflow does NOT check out PR code
+# (only reads title/body from the event payload), so the standard
+# pull_request_target exploitation vector (running fork code with elevated
+# secrets) does not apply.
+on:
+ pull_request_target:
+ types: [opened, edited]
+ branches: [rolling]
+
+permissions: {}
+
+jobs:
+ call:
+ if: github.repository_owner == 'vyos'
+ uses: vyos/.github/.github/workflows/lts-name-check-reusable.yml@production
+ secrets: inherit