adobe / adobe/aepsdk-commons

Build and test CI check does not block PR when action security rules prevent run

Open
#178 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Kotlin
Stars
3
Forks
13
Avg merge
6m
Merged PRs (30d)
1

Description

Not sure if this a platform limitation, but when the GHA build-and-test workflow is blocked by action security rules it does not show up as a required check for the PR, and therefore does not block the PR from being merged.

Investigate if there is a way to block the PR as a failed check even in this case.

See reference PR where this happened: https://github.com/adobe/aepsdk-edgeconsent-android/pull/110

Image

* Notice the lack of the build-and-test checks in this PR

Run: https://github.com/adobe/aepsdk-edgeconsent-android/actions/runs/16947533068

Image

* Notice the failure of the run to start due to blocked actions

Contributor guide

Open the contributing guide

Research direction

Start with the GHA build-and-test workflow and compare the reference PR #110 with the linked Actions run. Investigate how action security rules affect required checks and whether the workflow configuration exposes a failed status when the run cannot start. Done means a blocked workflow prevents the PR from being merged, or the platform limitation is documented.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions
Domain
ci-cd
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.