From a592ef5945cfa1c9a13703301e2aed6ed7823d44 Mon Sep 17 00:00:00 2001
From: Christian Kotzbauer <git@ckotzbauer.de>
Date: Fri, 17 Jun 2022 13:35:14 +0200
Subject: [PATCH] test: only execute on non-forks

Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de>
---
 .github/workflows/test.yml | 31 ++++++++++++++++++-------------
 1 file changed, 18 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 1e0d3352..e5273e41 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -45,20 +45,25 @@ jobs:
         env:
           REGISTRY_USER: ckotzbauer
           REGISTRY_TOKEN: ${{ secrets.GHCR_PASSWORD }}
+          IS_FORK: ${{ github.event.pull_request.head.repo.full_name == github.repository }}
         run: |
-          make test
-
-          DATE="$(date +%Y%m%d%H%M%S)"
-
-          docker login -u "$REGISTRY_USER" -p "$REGISTRY_TOKEN" ghcr.io
-          docker build --build-arg date=${DATE} -t ghcr.io/ckotzbauer/sbom-operator/oci-test:${DATE} internal/target/oci/fixtures
-          docker push ghcr.io/ckotzbauer/sbom-operator/oci-test:${DATE}
-          DIGEST=$(docker inspect ghcr.io/ckotzbauer/sbom-operator/oci-test:${DATE} --format='{{index .RepoDigests 0}}')
-
-          syft registry:${DIGEST} -o json > internal/target/oci/fixtures/sbom.json
-          TEST_DIGEST="${DIGEST}" go test $(go list ./...) -coverprofile cover.out
-
-          COSIGN_REPOSITORY="ghcr.io/ckotzbauer/sbom-operator/oci-test" cosign download sbom ${DIGEST}
+          if [ "$IS_FORK" != 'true' ]; then
+            DATE="$(date +%Y%m%d%H%M%S)"
+            docker login -u "$REGISTRY_USER" -p "$REGISTRY_TOKEN" ghcr.io
+            docker build --build-arg date=${DATE} -t ghcr.io/ckotzbauer/sbom-operator/oci-test:${DATE} internal/target/oci/fixtures
+            docker push ghcr.io/ckotzbauer/sbom-operator/oci-test:${DATE}
+            DIGEST=$(docker inspect ghcr.io/ckotzbauer/sbom-operator/oci-test:${DATE} --format='{{index .RepoDigests 0}}')
+            syft registry:${DIGEST} -o json > internal/target/oci/fixtures/sbom.json
+            TEST_LIST="$(go list ./...)"
+          else
+            TEST_LIST="$(go list ./... | grep -v internat/target/oci)"
+          fi
+
+          TEST_DIGEST="${DIGEST}" go test "$TEST_LIST" -coverprofile cover.out
+
+          if [ "$IS_FORK" != 'true' ]; then
+            COSIGN_REPOSITORY="ghcr.io/ckotzbauer/sbom-operator/oci-test" cosign download sbom ${DIGEST}
+          fi
 
       - uses: codecov/codecov-action@v3
         with: