doctr icon indicating copy to clipboard operation
doctr copied to clipboard

TRAVIS_TAG could set canpush without checking all rules

Open peterjc opened this issue 6 years ago • 2 comments

If $TRAVIS_TAG and --build-tags are set, then we get canpush=True without checking all rules, e.g. If the repository was a fork, then the push should be prevented.

As an aside, I noticed this edge can while looking at issue #342 (there are legitimate cases where it is reasonable to want to push from a forked repository).

peterjc avatar Jun 14 '19 23:06 peterjc

Looks like the doctr tests don't even pass on fork builds. I need to finish https://github.com/drdoctr/doctr/pull/343.

asmeurer avatar Jun 17 '19 17:06 asmeurer

Oh actually I think that test failure is legitimate. It's a test for this function. So it should be updated.

I think I never considered the fact that someone would push a tag to their fork, but this looks correct.

asmeurer avatar Jun 17 '19 17:06 asmeurer