diff --git a/.github/workflows/pr_github_metadata.yaml b/.github/workflows/pr_github_metadata.yaml index f4ca1598fa2..00bddb62143 100644 --- a/.github/workflows/pr_github_metadata.yaml +++ b/.github/workflows/pr_github_metadata.yaml @@ -1,7 +1,7 @@ name: PR Github Metadata on: - pull_request: + pull_request_target: types: [opened, edited, reopened] permissions: @@ -32,7 +32,6 @@ jobs: label-pr: name: Set Labels - if: github.event.pull_request.head.repo.fork == false runs-on: ubuntu-latest steps: - name: Checkout repository diff --git a/.github/workflows/pr_github_status_l1.yaml b/.github/workflows/pr_github_status_l1.yaml index e7a19a97385..5eb9737acc4 100644 --- a/.github/workflows/pr_github_status_l1.yaml +++ b/.github/workflows/pr_github_status_l1.yaml @@ -10,6 +10,8 @@ on: edited, ready_for_review, converted_to_draft, + labeled, + unlabeled, ] pull_request_review: types: [submitted] @@ -18,7 +20,8 @@ jobs: update-project-status: name: Update PR status for ethrex_l1 project runs-on: ubuntu-latest - # sadly pull_request_review doesn't have direct access to labels information so we'll have to check this later. + # Skip forked PRs: they can't access the GitHub App secrets this job relies on. + # pull_request_review lacks label data, so the script double-checks before proceeding. if: github.event.pull_request.head.repo.fork == false && (github.event_name == 'pull_request_review' || contains(github.event.pull_request.labels.*.name, 'L1')) permissions: contents: read