Aurélien Bombo 2ee3470627 ci: gha: Remove ok-to-test label on every push ...

This removes the ok-to-test label on every push, except if the PR author
has write access to the repo (ie. permission to modify labels).

This protects against attackers who would initially open a genuine PR,
then push malicious code after the initial review.

Signed-off-by: Aurélien Bombo <abombo@microsoft.com>

2025-06-09 12:37:06 -05:00

..

actionlint.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

basic-ci-amd64.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

basic-ci-s390x.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

build-checks-preview-riscv64.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

build-checks.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

build-kata-static-tarball-amd64.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

build-kata-static-tarball-arm64.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

build-kata-static-tarball-ppc64le.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

build-kata-static-tarball-riscv64.yaml

Merge pull request #11334 from kata-containers/remove-inherit-secrets

2025-06-06 16:41:13 +01:00

build-kata-static-tarball-s390x.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

cargo-deny-runner.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

ci-coco-stability.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

ci-devel.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

ci-nightly-s390x.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

ci-nightly.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

ci-on-push.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

ci-weekly.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

ci.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

cleanup-resources.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

codeql.yml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

commit-message-check.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

darwin-tests.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

docs-url-alive-check.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

gatekeeper-skipper.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

gatekeeper.yaml

workflows: Add explicit permissions where needed

2025-05-28 19:34:28 +01:00

kata-runtime-classes-sync.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

payload-after-push.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

PR-wip-checks.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

publish-kata-deploy-payload.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

release-amd64.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

release-arm64.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

release-ppc64le.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

release-s390x.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

release.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

run-cri-containerd-tests-ppc64le.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

run-k8s-tests-on-aks.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

run-k8s-tests-on-amd64.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

run-k8s-tests-on-arm64.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

run-k8s-tests-on-ppc64le.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

run-k8s-tests-on-zvsi.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

run-kata-coco-stability-tests.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

run-kata-coco-tests.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

run-kata-deploy-tests-on-aks.yaml

workflows: Replace secrets: inherit

2025-06-06 09:56:46 +01:00

run-kata-deploy-tests.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

run-kata-monitor-tests.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

run-metrics.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

run-runk-tests.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

shellcheck_required.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

shellcheck.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

stale.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

static-checks-self-hosted.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

static-checks.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

validate-ok-to-test.yml

ci: gha: Remove ok-to-test label on every push

2025-06-09 12:37:06 -05:00