idk/go-github-sync
1
0
Fork 0
mirror of https://github.com/go-i2p/go-github-sync.git synced 2025-07-03 22:19:42 -04:00
Code Issues Packages Projects Releases Wiki Activity

mirror on push

Browse Source
This commit is contained in:
eyedeekay
2025-05-09 23:06:13 -04:00
parent b30b4f158c
commit ecd6b0d4cf
1 changed files with 2 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
pkg/workflow/generator.go
View File

@ -81,30 +81,18 @@ func generateWorkflowYAML(data WorkflowTemplate) (string, error) {
workflow := map[string]interface{}{
"name": "Sync Primary Repository to GitHub Mirror",
"on": map[string]interface{}{
"push": map[string]interface{}{
"branches": []string{data.MirrorBranch},
},
"schedule": []map[string]string{
{"cron": data.CronSchedule},
},
"workflow_dispatch": map[string]interface{}{}, // Allow manual triggering
},
// Add environment constraints to prevent running outside GitHub Actions
"permissions": map[string]string{
"contents": "write", // Needed to push changes
"actions": "read", // Minimal action permissions
},
"jobs": map[string]interface{}{
"sync": map[string]interface{}{
"runs-on": "ubuntu-latest",
// Add environment check to ensure GitHub Actions environment
"env": map[string]string{
"GITHUB_ACTIONS_ENVIRONMENT": "${{ github.action }}", // Should always be set in GitHub Actions
},
"steps": []map[string]interface{}{
{
"name": "Security Check",
"run": "if [ \"$GITHUB_ACTIONS_ENVIRONMENT\" == \"\" ]; then echo \"This workflow is only intended to run inside GitHub Actions\"; exit 1; fi",
"name": "Validate Github Actions Environment",
"run": "if [ \"$GITHUB_ACTIONS\" != \"true\" ]; then echo 'This script must be run in a GitHub Actions environment.'; exit 1; fi",
},
{
"name": "Checkout GitHub Mirror",