Prevent duplicate jobs during privileged runs

woop · woop · commit 6c19d448d40d · 2021-03-06T17:32:21.000-08:00
Signed-off-by: Willem Pienaar &lt;git@willem.co&gt;
diff --git a/.github/workflows/privileged.yml b/.github/workflows/privileged.yml
@@ -10,7 +10,8 @@ on:
 jobs:
   integration-test-python:
     # all jobs MUST have this if check for 'ok-to-test' or 'approved' for security purposes.
-    if: contains(github.event.pull_request.labels.*.name, 'ok-to-test') || contains(github.event.pull_request.labels.*.name, 'approved')
+    if: (github.event.action == 'labeled' && (github.event.label.name == 'approved' || github.event.label.name == 'ok-to-test'))
+      || (github.event.action != 'labeled' && (contains(github.event.pull_request.labels.*.name, 'ok-to-test') || contains(github.event.pull_request.labels.*.name, 'approved')))
     runs-on: ubuntu-latest
     container: gcr.io/kf-feast/feast-ci:latest
     steps:
