From d4c495136812227918c5061c2f0af08f6a5398f4 Mon Sep 17 00:00:00 2001 From: BrewTestBot Date: Thu, 31 Oct 2024 14:51:15 -0400 Subject: [PATCH] Synchronize shared configuration (#952) --- .github/workflows/actionlint.yml | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml index 2e368d09..a3b450f7 100644 --- a/.github/workflows/actionlint.yml +++ b/.github/workflows/actionlint.yml @@ -1,5 +1,5 @@ # This file is synced from the `.github` repository, do not modify it directly. -name: Workflow Syntax +name: Actionlint on: push: @@ -45,7 +45,7 @@ jobs: - uses: actions/checkout@v4 with: - persist-credentials: false + persist-credentials: ${{ github.event.repository.private }} - run: zizmor --format sarif . >results.sarif @@ -63,7 +63,11 @@ jobs: upload_sarif: needs: workflow_syntax # We want to always upload this even if `actionlint` failed. - if: always() && !contains(fromJSON('[["cancelled", "skipped"]]'), needs.workflow_syntax.result) + # This is only available on public repositories. + if: > + always() && + !contains(fromJSON('[["cancelled", "skipped"]]'), needs.workflow_syntax.result) && + !github.event.repository.private runs-on: ubuntu-latest permissions: contents: read