From 22d75e6794fd7815046c49fccab16e401a0283c2 Mon Sep 17 00:00:00 2001
From: Alice Frosi <afrosi@redhat.com>
Date: Mon, 21 Sep 2026 05:21:44 +0000
Subject: [PATCH] Revert "gha: gate CI on org membership or ok-to-test label"

This reverts commit ecbd0a3b16aeaf20790f801aa313089a16fc9f39.

The check doesn't work since it requires approval in any case, and it
blocks the PR from non-members which have already contributed once or
the dependabot.

Signed-off-by: Alice Frosi <afrosi@redhat.com>
---
 .github/workflows/check-permissions.yml | 14 --------------
 .github/workflows/ci.yaml               |  7 -------
 .github/workflows/zizmor.yml            |  5 -----
 3 files changed, 26 deletions(-)
 delete mode 100644 .github/workflows/check-permissions.yml

diff --git a/.github/workflows/check-permissions.yml b/.github/workflows/check-permissions.yml
deleted file mode 100644
index aa470cb3..00000000
--- a/.github/workflows/check-permissions.yml
+++ /dev/null
@@ -1,14 +0,0 @@
-name: Check Permissions
-
-on:
-  workflow_call:
-
-jobs:
-  authorize:
-    runs-on: ubuntu-latest
-    if: >-
-      github.event_name == 'push' ||
-      contains(fromJSON('["MEMBER", "OWNER", "COLLABORATOR"]'), github.event.pull_request.author_association) ||
-      contains(github.event.pull_request.labels.*.name, 'ok-to-test')
-    steps:
-      - run: echo "CI authorized"
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index c81df64d..6d8de8f0 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -6,7 +6,6 @@ on:
     tags: ["v*"]
   pull_request:
     branches: [main]
-    types: [opened, synchronize, reopened, labeled]
 
 env:
   BINK_COMMIT: e7d4574fdc610a9fd9bd067aff984516ec7c507d
@@ -18,11 +17,7 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  check-permissions:
-    uses: $/.github/workflows/check-permissions.yml
-
   unit:
-    needs: [check-permissions]
     runs-on: ubuntu-latest
     permissions:
       contents: read
@@ -53,7 +48,6 @@ jobs:
         run: make lint
 
   build-bink:
-    needs: [check-permissions]
     runs-on: ubuntu-latest
     permissions:
       contents: read
@@ -90,7 +84,6 @@ jobs:
           path: bink
 
   build-operator:
-    needs: [check-permissions]
     runs-on: ubuntu-latest
     permissions:
       contents: read
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 326e47f1..42726edb 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -5,16 +5,11 @@ on:
     branches: [main]
   pull_request:
     branches: ["**"]
-    types: [opened, synchronize, reopened, labeled]
 
 permissions: {}
 
 jobs:
-  check-permissions:
-    uses: $/.github/workflows/check-permissions.yml
-
   zizmor:
-    needs: [check-permissions]
     name: Scan GHA workflows
     runs-on: ubuntu-24.04
     permissions: