ci: Enable forks to run CI

kylecarbs · kylecarbs · commit 5757ba60140d · 2022-04-07T02:01:24.000Z
All steps that require tokens are optional for forks,
and will be skipped if the owner is not "coder".
diff --git a/.github/workflows/chromatic.yaml b/.github/workflows/chromatic.yaml
@@ -33,7 +33,9 @@ jobs:
         with:
           buildScriptName: "storybook:build"
           exitOnceUploaded: true
-          projectToken: ${{ secrets.CHROMATIC_PROJECT_TOKEN }}
+          # Chromatic states its fine to make this token public. See:
+          # https://www.chromatic.com/docs/github-actions#forked-repositories
+          projectToken: 695c25b6cb65
           workingDir: "./site"
 
       # This is a separate step for mainline only that auto accepts and changes
@@ -48,5 +50,5 @@ jobs:
         with:
           autoAcceptChanges: true
           buildScriptName: "storybook:build"
-          projectToken: ${{ secrets.CHROMATIC_PROJECT_TOKEN }}
+          projectToken: 695c25b6cb65
           workingDir: "./site"
diff --git a/.github/workflows/coder-test-stability.yaml b/.github/workflows/coder-test-stability.yaml
diff --git a/.github/workflows/coder.yaml b/.github/workflows/coder.yaml
@@ -8,6 +8,11 @@ on:
     tags:
       - "*"
 
+  # This is required so CI can run on forked repositories too!
+  pull_request_target:
+    branches:
+      - "*"
+
   pull_request:
     branches:
       - "*"
@@ -178,7 +183,7 @@ jobs:
           -timeout=3m -count=$GOCOUNT -short -failfast
 
       - name: Upload DataDog Trace
-        if: (success() || failure()) && github.actor != 'dependabot[bot]'
+        if: (success() || failure()) && github.actor != 'dependabot[bot]' && github.repository_owner == 'coder'
         env:
           DATADOG_API_KEY: ${{ secrets.DATADOG_API_KEY }}
           DD_DATABASE: fake
@@ -187,7 +192,7 @@ jobs:
         run: go run scripts/datadog-cireport/main.go gotests.xml
 
       - uses: codecov/codecov-action@v2
-        if: github.actor != 'dependabot[bot]'
+        if: github.actor != 'dependabot[bot]' && github.repository_owner == 'coder'
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: ./gotests.coverage
@@ -264,25 +269,25 @@ jobs:
           -count=1 -parallel=2 -race -failfast
 
       - name: Upload DataDog Trace
-        if: (success() || failure()) && github.actor != 'dependabot[bot]'
+        if: (success() || failure()) && github.actor != 'dependabot[bot]' && github.repository_owner == 'coder'
         env:
           DATADOG_API_KEY: ${{ secrets.DATADOG_API_KEY }}
           DD_DATABASE: postgresql
           GIT_COMMIT_MESSAGE: ${{ github.event.head_commit.message }}
         run: go run scripts/datadog-cireport/main.go gotests.xml
 
       - uses: codecov/codecov-action@v2
-        if: github.actor != 'dependabot[bot]'
+        if: github.actor != 'dependabot[bot]' && github.repository_owner == 'coder'
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: ./gotests.coverage
           flags: unittest-go-${{ matrix.os }}
-          fail_ci_if_error: true
+          fail_ci_if_error: ${{ github.repository_owner == 'coder' }}
 
   deploy:
     name: "deploy"
     runs-on: ubuntu-latest
-    if: github.ref == 'refs/heads/main'
+    if: github.ref == 'refs/heads/main' && github.repository_owner == 'coder'
     permissions:
       contents: read
       id-token: write
@@ -391,15 +396,15 @@ jobs:
         working-directory: site
 
       - uses: codecov/codecov-action@v2
-        if: github.actor != 'dependabot[bot]'
+        if: github.actor != 'dependabot[bot]' && github.repository_owner == 'coder'
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: ./site/coverage/lcov.info
           flags: unittest-js
           fail_ci_if_error: true
 
       - name: Upload DataDog Trace
-        if: (success() || failure()) && github.actor != 'dependabot[bot]'
+        if: (success() || failure()) && github.actor != 'dependabot[bot]' && github.repository_owner == 'coder'
         env:
           DATADOG_API_KEY: ${{ secrets.DATADOG_API_KEY }}
           DD_CATEGORY: unit
@@ -483,7 +488,7 @@ jobs:
         working-directory: site
 
       - name: Upload DataDog Trace
-        if: (success() || failure()) && github.actor != 'dependabot[bot]' && runner.os == 'Linux'
+        if: (success() || failure()) && github.actor != 'dependabot[bot]' && runner.os == 'Linux' && github.repository_owner == 'coder'
         env:
           DATADOG_API_KEY: ${{ secrets.DATADOG_API_KEY }}
           DD_CATEGORY: e2e
