test: filter on PR type to avoid conflicting workflow runs

kweinmeister · kweinmeister · commit dcafdc778403 · 2023-08-15T08:26:18.000-05:00
diff --git a/.github/workflows/secret-manager.yaml b/.github/workflows/secret-manager.yaml
@@ -36,7 +36,8 @@ jobs:
     permissions:
       contents: 'read'
       id-token: 'write'
-    if: github.event.action != 'labeled' || github.event.label.name == 'actions:force-run'
+    # Test on PRs when label is applied or on branch PRs. Main check avoids running forked PRs using pull_request event.
+    if: github.event.label.name == 'actions:force-run' || (github.event.action != 'labeled' && github.head_ref != 'main')
     uses: ./.github/workflows/test.yaml
     with:
       name: 'secret-manager'
