Skip to content

Only virko can trigger deployments (PF-3369)#38

Draft
claude[bot] wants to merge 1 commit into
gynzyfrom
pf-3369-virko-only-deployments
Draft

Only virko can trigger deployments (PF-3369)#38
claude[bot] wants to merge 1 commit into
gynzyfrom
pf-3369-virko-only-deployments

Conversation

@claude

@claude claude Bot commented Jun 26, 2026

Copy link
Copy Markdown

Requested by Stef Louwers · Slack thread

Before: the deploy job in Release.yml ran for any deployment event targeting the production environment, regardless of who created it — including manually-created deployment events.

After: the deploy job only runs when the deployment event was created by the gynzy-virko bot. Manually-created deployment events are skipped. The generated gate now reads:
"${{ (github.event.deployment.environment == 'production') && github.event.deployment.creator.login == 'gynzy-virko' }}"

How:

  • Bumped the vendored lib-jsonnet pin (.github/jsonnet/GIT_VERSION) from 85284ade969df3f45c01eb0a9c513267c0a60b81 to the merged lib commit 358da535b48d02d139dee0974843d2e646b972fe, where the virko gate is centralized in deploymentTargets().
  • This repo's own .github.jsonnet already calls deployment.deploymentTargets(['production']) for its deploy job, so the gate flows in automatically — no hand-edits to clauses.
  • Regenerated .github/workflows/*.yml via the repo's .github/jsonnet/pull-upstream-and-rebuild.sh.

Note: bumping the vendored lib also pulls in other lib changes accumulated since this repo's previous pin (e.g. updates to cache.jsonnet, pnpm.jsonnet, pulumi.jsonnet, and the corresponding CI.yml / Build Agent Images.yml regeneration). This is expected and consistent with the same approach taken in backend-nest #3462 and frontend-ember #7655.

Reference: PF-3369.


Generated by Claude Code

Bump vendored lib-jsonnet to 358da535b48d02d139dee0974843d2e646b972fe
and regenerate workflows. The deploymentTargets() helper now gates deploy
jobs so they only run for deployment events created by gynzy-virko.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0194WzrNYXRJKhejZT9gdpdF
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant