only run public fulcio examples on push

Signed-off-by: Josh Dolitsky <josh@dolit.ski>
sigstore · Jul 28, 2022 · ae0d67a · ae0d67a
1 parent ea952b2
commit ae0d67a
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/.github/workflows/policy-tester-examples.yml b/.github/workflows/policy-tester-examples.yml
@@ -60,7 +60,9 @@ jobs:
           -p 5000:5000 \
           registry:2
 
-    - name: Example (keyless-attestation-sbom-spdxjson)
+    # This example requires public Fulcio, only run on push to main
+    - if: ${{ github.event_name == 'push' }}
+      name: Example (keyless-attestation-sbom-spdxjson)
       working-directory: ./src/github.com/${{ github.repository }}/examples
       run: |
         REF="localhost:5000/examples/keyless-attestation-sbom-spdxjson"

diff --git a/.gitignore b/.gitignore
@@ -32,4 +32,3 @@ policyImagerefs
 **verify-experimental*
 
 policy-tester
-spdx-sbom.json
Original file line number	Diff line number	Diff line change
Expand Up		@@ -32,4 +32,3 @@ policyImagerefs
		*verify-experimental

		policy-tester
		spdx-sbom.json