Skip to content

ci: trigger platform-api cloud release on push, not pull_request - #3312

Merged
renuka-fernando merged 1 commit into
wso2:platform-api/v0.10.xfrom
renuka-fernando:ci-cloud-release-push-trigger
Aug 25, 2026
Merged

ci: trigger platform-api cloud release on push, not pull_request#3312
renuka-fernando merged 1 commit into
wso2:platform-api/v0.10.xfrom
renuka-fernando:ci-cloud-release-push-trigger

Conversation

@renuka-fernando

Copy link
Copy Markdown
Contributor

Purpose

Follow-up to #3311. The Platform API Cloud Release workflow triggered on pull_request: [closed], but a pull_request run for a PR opened from a fork receives no repository secrets. Merges of fork PRs therefore failed the pre-flight check with AZURE_WEBHOOK_URL / AZURE_WEBHOOK_SECRET unset, and only a manual workflow_dispatch could trigger the Azure build.

Approach

  • Switch the trigger from pull_request: [closed] to push on the release branches (main, platform-api/v0.10.x). A merge produces a push, which runs with full secret access and executes the workflow version that lives on the pushed branch.
  • Drop the now-unneeded merged-PR if: guard.
  • Replace the pull_request-specific BRANCH/COMMIT expressions with github.ref_name / github.sha, which are correct for both push and workflow_dispatch.

Related Issues

N/A — follow-up to #3311.

Automation tests

N/A — CI workflow change only.

Security checks

  • Followed secure coding standards? yes
  • Confirmed that this PR doesn't commit any keys, passwords, tokens, usernames, or other secrets? yes — the secret is still read from secrets.AZURE_WEBHOOK_SECRET.

Checklist

  • Tests added or updated (unit, integration, etc.)
  • Samples updated (if applicable)

Switch the Platform API cloud-release trigger from
`pull_request: [closed]` to `push` on the release branches. A
pull_request run for a PR opened from a fork gets no repository
secrets, so merges of fork PRs failed with the webhook secrets
unset. A push (which a merge produces) runs with full secret
access and executes the workflow version on the pushed branch.

Drop the now-unneeded merged-PR `if:` guard and the
pull_request-specific BRANCH/COMMIT expressions in favour of
github.ref_name / github.sha.

Signed-off-by: Renuka Fernando <renukapiyumal@gmail.com>
@coderabbitai

coderabbitai Bot commented Aug 25, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 80cc50f5-6a50-4008-80bc-2a7aac66db55

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@renuka-fernando
renuka-fernando merged commit d57259d into wso2:platform-api/v0.10.x Aug 25, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants