npmx-dev
diff --git a/Collapse file
‎.github/workflows/enforce-release-source.yml‎
Copy file name to clipboard
+33Lines changed: 33 additions & 0 deletions b/Collapse file
‎.github/workflows/enforce-release-source.yml‎
Copy file name to clipboard
+33Lines changed: 33 additions & 0 deletions
@@ -0,0 +1,33 @@
+name: chore
+
+on:
+  pull_request_target:
+    branches:
+      - release
+    types:
+      - opened
+      - reopened
+      - edited
+      - synchronize
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+permissions: {}
+
+jobs:
+  enforce-source:
+    if: github.repository == 'npmx-dev/npmx.dev'
+    runs-on: ubuntu-slim
+    name: 🚦 Enforce release source
+    steps:
+      - name: Check PR is from main
+        env:
+          HEAD_REPO: ${{ github.event.pull_request.head.repo.full_name }}
+          HEAD_REF: ${{ github.event.pull_request.head.ref }}
+        run: |
+          if [ "$HEAD_REPO" != "npmx-dev/npmx.dev" ] || [ "$HEAD_REF" != "main" ]; then
+            echo "::error::PRs to 'release' must come from npmx-dev/npmx.dev:main (got ${HEAD_REPO}:${HEAD_REF})"
+            exit 1
+          fi