From d414c05fc55c10454fe62b510d4518ac6f675520 Mon Sep 17 00:00:00 2001 From: Andrew Halberstadt Date: Tue, 23 Aug 2022 11:06:20 -0400 Subject: [PATCH] Test out the `public_restricted` policy Switches policy to `public_restricted` and sets the task to fail if opened by a non-collaborator. --- .taskcluster.yml | 30 ++++++++++++++---------------- 1 file changed, 14 insertions(+), 16 deletions(-) diff --git a/.taskcluster.yml b/.taskcluster.yml index f511ca1..fadd2f8 100644 --- a/.taskcluster.yml +++ b/.taskcluster.yml @@ -1,30 +1,28 @@ version: 1 reporting: checks-v1 policy: - pullRequests: collaborators + pullRequests: public_restricted tasks: - - $if: 'tasks_for == "github-push"' + - $if: 'tasks_for == "github-pull-request-untrusted"' then: - taskQueueId: built-in/succeed + taskQueueId: built-in/fail schedulerId: taskcluster-ui created: {$fromNow: ''} deadline: {$fromNow: '1 day'} payload: {} metadata: - name: example-task-push-1 + name: example-task-1 description: An **example** task owner: ykurmyza@mozilla.com source: http://taskcluster/tasks/create else: - $if: 'tasks_for == "github-pull-request"' - then: - taskQueueId: built-in/succeed - schedulerId: taskcluster-ui - created: {$fromNow: ''} - deadline: {$fromNow: '1 day'} - payload: {} - metadata: - name: example-task-pull-1 - description: An **example** task - owner: ykurmyza@mozilla.com - source: http://taskcluster/tasks/create \ No newline at end of file + taskQueueId: built-in/succeed + schedulerId: taskcluster-ui + created: {$fromNow: ''} + deadline: {$fromNow: '1 day'} + payload: {} + metadata: + name: example-task-1 + description: An **example** task + owner: ykurmyza@mozilla.com + source: http://taskcluster/tasks/create