fix(ci): skip Lark notification for fork pull requests - #114
Conversation
|
Important Review skippedReview was skipped due to path filters ⛔ Files ignored due to path filters (1)
CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including ⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Pro Plus Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Fixes #113
改动
.github/workflows/Lark-notification.yml的发送步骤增加 secret 判空条件。GitHub Actions 规定if:不能直接引用secrets.*,所以先把 secret 是否存在映射为 job 级 env:fork PR 拿不到仓库 secrets 时跳过发送,不再以空 URL 调用 feishu-action 导致
No URL protocol specified、Check 变红。env 里只放布尔标志,hook URL 的暴露范围保持不变(仅 feishu-action 步骤)。行为对照
不采用
pull_request_target:workflow 会执行仓库内脚本(transform-message.ts),在该事件下 checkout 外部 PR 代码并暴露 secrets 有泄露风险。