Build and test CI check does not block PR when action security rules prevent run
- Dominant language
- Kotlin
- Stars
- 3
- Forks
- 13
- Avg merge
- 6m
- Merged PRs (30d)
- 1
Description
Not sure if this a platform limitation, but when the GHA build-and-test workflow is blocked by action security rules it does not show up as a required check for the PR, and therefore does not block the PR from being merged.
Investigate if there is a way to block the PR as a failed check even in this case.
See reference PR where this happened: https://github.com/adobe/aepsdk-edgeconsent-android/pull/110
* Notice the lack of the build-and-test checks in this PR
Run: https://github.com/adobe/aepsdk-edgeconsent-android/actions/runs/16947533068
* Notice the failure of the run to start due to blocked actions
Contributor guide
Research direction
Start with the GHA build-and-test workflow and compare the reference PR #110 with the linked Actions run. Investigate how action security rules affect required checks and whether the workflow configuration exposes a failed status when the run cannot start. Done means a blocked workflow prevents the PR from being merged, or the platform limitation is documented.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions
- Domain
- ci-cd
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100