fix: add logic to bypass token for forks

codecov · Apr 30, 2024 · 4960f3d · 4960f3d
1 parent ae7230e
commit 4960f3d
Show file tree

Hide file tree

Showing 3 changed files with 22 additions and 1 deletion.
diff --git a/dist/index.js b/dist/index.js
@@ -32562,7 +32562,16 @@ const getGitService = () => {
  }
  return 'github';
 };
+const isFork = () => {
+ const baseLabel = context.payload.pull_request.base.label;
+ const headLabel = context.payload.pull_request.head.label;
+ return (baseLabel.split(':')[0] !== headLabel.split(':')[0]);
+};
 const getToken = () => buildExec_awaiter(void 0, void 0, void 0, function* () {
+ if (isFork) {
+ core.info('==> Fork detected, tokenless uploading used');
+ return Promise.resolve('');
+ }
  let token = core.getInput('token');
  let url = core.getInput('url');
  const useOIDC = isTrue(core.getInput('use_oidc'));

diff --git a/dist/index.js.map b/dist/index.js.map
diff --git a/src/buildExec.ts b/src/buildExec.ts
@@ -29,7 +29,19 @@ const getGitService = (): string => {
  return 'github';
 };
 
+const isFork = (): boolean => {
+ const baseLabel = context.payload.pull_request.base.label;
+ const headLabel = context.payload.pull_request.head.label;
+
+ return (baseLabel.split(':')[0] !== headLabel.split(':')[0]);
+};
+
 const getToken = async (): Promise<string> => {
+ if (isFork) {
+ core.info('==> Fork detected, tokenless uploading used');
+ return Promise.resolve('');
+ }
+
  let token = core.getInput('token');
  let url = core.getInput('url');
  const useOIDC = isTrue(core.getInput('use_oidc'));