foster/forgejo-docs
0
0
Fork 0
mirror of https://codeberg.org/forgejo/docs.git synced 2024-12-02 19:24:46 -05:00
Code Issues Activity

user: actions: on.pull_request_target workflows are not moderated

Browse source 
(cherry picked from commit 1f7a005627)
This commit is contained in:
Earl Warren 2023-09-28 18:20:16 +02:00 committed by Earl Warren
parent ab3dc4d639
commit 334a5305c3
1 changed files with 8 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
docs/user/actions.md
View file

@ -188,16 +188,21 @@ A `workflow` can be disabled (or enabled) by selecting it and using the three do
![disabling a workflow](../_images/user/actions/actions-disable.png) ![disabling a workflow](../_images/user/actions/actions-disable.png)
## Pull request actions are moderated ## Pull request workflows are moderated
The first time a user proposes a pull request, the task is blocked to reduce the security risks. The first time a user proposes a pull request, the `on.pull_request`
workflows are blocked.
![blocked action](../_images/user/actions/action-blocked.png) ![blocked action](../_images/user/actions/action-blocked.png)
It can be approved by a maintainer of the project and there will be no need to unblock future pull requests. They can be approved by a maintainer of the project and there will be
no need to unblock future pull requests.
![button to approve an action](../_images/user/actions/action-approve.png) ![button to approve an action](../_images/user/actions/action-approve.png)
The `on.pull_request_target` workflows are not subject to the same
restriction and will always run.
## Secrets ## Secrets
A repository, a user or an organization can hold secrets, a set of key/value pairs that are stored encrypted in the `Forgejo` database and revealed to the `workflows` as `${{ secrets.KEY }}`. They can be defined from the web interface: A repository, a user or an organization can hold secrets, a set of key/value pairs that are stored encrypted in the `Forgejo` database and revealed to the `workflows` as `${{ secrets.KEY }}`. They can be defined from the web interface: