diff --git a/.github/workflows/check-permissions.yml b/.github/workflows/check-permissions.yml deleted file mode 100644 index aa470cb..0000000 --- a/.github/workflows/check-permissions.yml +++ /dev/null @@ -1,14 +0,0 @@ -name: Check Permissions - -on: - workflow_call: - -jobs: - authorize: - runs-on: ubuntu-latest - if: >- - github.event_name == 'push' || - contains(fromJSON('["MEMBER", "OWNER", "COLLABORATOR"]'), github.event.pull_request.author_association) || - contains(github.event.pull_request.labels.*.name, 'ok-to-test') - steps: - - run: echo "CI authorized" diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index c81df64..6d8de8f 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -6,7 +6,6 @@ on: tags: ["v*"] pull_request: branches: [main] - types: [opened, synchronize, reopened, labeled] env: BINK_COMMIT: e7d4574fdc610a9fd9bd067aff984516ec7c507d @@ -18,11 +17,7 @@ concurrency: cancel-in-progress: true jobs: - check-permissions: - uses: $/.github/workflows/check-permissions.yml - unit: - needs: [check-permissions] runs-on: ubuntu-latest permissions: contents: read @@ -53,7 +48,6 @@ jobs: run: make lint build-bink: - needs: [check-permissions] runs-on: ubuntu-latest permissions: contents: read @@ -90,7 +84,6 @@ jobs: path: bink build-operator: - needs: [check-permissions] runs-on: ubuntu-latest permissions: contents: read diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 326e47f..42726ed 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -5,16 +5,11 @@ on: branches: [main] pull_request: branches: ["**"] - types: [opened, synchronize, reopened, labeled] permissions: {} jobs: - check-permissions: - uses: $/.github/workflows/check-permissions.yml - zizmor: - needs: [check-permissions] name: Scan GHA workflows runs-on: ubuntu-24.04 permissions: