Add a bit mure security

reload · May 16, 2024 · 73820d5 · 73820d5
1 parent eae39e9
commit 73820d5
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/create-pr.yml b/.github/workflows/create-pr.yml
@@ -35,7 +35,8 @@ jobs:
             composer remove ${{ env.PACKAGE }} \
             && composer require ${{ env.PACKAGE }}
           attempt_limit: 200
-        if: ${{ env.BUILD_URL && env.PACKAGE }}
+        # TODO: Remember to change hardcoded url check.
+        if: ${{ env.BUILD_URL && env.PACKAGE && startsWith(env.BUILD_URL, 'https://github.com/reload/poc-dpl-react-pr-trigger/releases/download') }}
 
       - name: Create branch and PR
         run: |