From 73820d5477d3287534c165a9e4f5c94e327d6ddb Mon Sep 17 00:00:00 2001
From: Mikkel Jakobsen <jakobsen.mikkel@gmail.com>
Date: Fri, 17 May 2024 00:00:36 +0200
Subject: [PATCH] Add a bit mure security

---
 .github/workflows/create-pr.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/create-pr.yml b/.github/workflows/create-pr.yml
index 426b6aa91..c2467102f 100644
--- a/.github/workflows/create-pr.yml
+++ b/.github/workflows/create-pr.yml
@@ -35,7 +35,8 @@ jobs:
             composer remove ${{ env.PACKAGE }} \
             && composer require ${{ env.PACKAGE }}
           attempt_limit: 200
-        if: ${{ env.BUILD_URL && env.PACKAGE }}
+        # TODO: Remember to change hardcoded url check.
+        if: ${{ env.BUILD_URL && env.PACKAGE && startsWith(env.BUILD_URL, 'https://github.com/reload/poc-dpl-react-pr-trigger/releases/download') }}
 
       - name: Create branch and PR
         run: |