molecule-ai/molecule-ai-workspace-template-claude-code
35
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #14 from Molecule-AI/fix/no-publish-on-pr

Browse Source 
fix(publish-image): drop pull_request trigger — leaks PR builds to GHCR
This commit is contained in:
Hongming Wang 2026-04-29 00:56:54 -07:00 committed by GitHub
commit afc0fae6e7
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
.github/workflows/publish-image.yml vendored
View File

@ -14,7 +14,12 @@ on:
types: [runtime-published]
push:
branches: [main]
pull_request:
# NOTE: do NOT add `pull_request:` here. The reusable
# publish-template-image workflow has no PR-skip guard, so a PR
# trigger pushes per-PR :latest clobbers and sha-<7> tags for
# unmerged code to GHCR. PRs already get a Dockerfile build smoke
# test from the validate-workspace-template workflow (no push) —
# that's the right place for PR-time verification.
workflow_dispatch:
inputs:
runtime_version:
@ -35,6 +40,6 @@ jobs:
# exact version PyPI just published. Forwarded to the reusable
# workflow as a docker --build-arg so the cache key changes
# per-version and pip install resolves freshly.
# On other events (push/PR/manual without input), this is empty
# and the Dockerfile's default (requirements.txt pin) applies.
# On other events (push to main / manual without input), this is
# empty and the Dockerfile's default (requirements.txt pin) applies.
runtime_version: ${{ github.event.client_payload.runtime_version || inputs.runtime_version || '' }}