Use docker-build env to access GHCR_PAT (pytorch#107655)

This will restrict the access to GHCR_PAT to only [docker-build](https://github.com/pytorch/pytorch/settings/environments/1258682414/edit) env. Pull Request resolved: pytorch#107655 Approved by: https://github.com/clee2000, https://github.com/atalman
BinnyKing · Aug 23, 2023 · 9a365fe · 9a365fe
1 parent b74b8e3
commit 9a365fe
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/.github/workflows/docker-builds.yml b/.github/workflows/docker-builds.yml
@@ -28,6 +28,7 @@ env:
 jobs:
   docker-build:
     runs-on: [self-hosted, linux.2xlarge]
+    environment: ${{ (github.ref == 'refs/heads/main' || startsWith(github.event.ref, 'refs/tags/v')) && 'docker-build' || '' }}
     timeout-minutes: 240
     strategy:
       fail-fast: false

diff --git a/.github/workflows/docker-release.yml b/.github/workflows/docker-release.yml
@@ -32,6 +32,7 @@ jobs:
   build:
     if: ${{ github.repository == 'pytorch/pytorch' }}
     runs-on: [self-hosted, linux.2xlarge]
+    environment: ${{ (github.ref == 'refs/heads/main' || startsWith(github.event.ref, 'refs/tags/v')) && 'docker-build' || '' }}
     timeout-minutes: 240
     strategy:
       matrix: