fix: require explicit dispatch for public demo redeployment

2026-10-05 15:42:46 -04:00
parent e6e46a1427
commit 69857c4ace
3 changed files with 7 additions and 3 deletions
@@ -74,5 +74,6 @@ jobs:
            ${{ vars.DEMO_REGISTRY }}/archy-demo-web:${{ github.sha }}

      - name: Trigger Portainer redeploy
-        if: ${{ success() && secrets.PORTAINER_WEBHOOK != '' }}
+        # Source pushes prepare images; public deployment is an explicit post-release action.
+        if: ${{ success() && github.event_name == 'workflow_dispatch' && secrets.PORTAINER_WEBHOOK != '' }}
        run: curl -fsS -X POST "${{ secrets.PORTAINER_WEBHOOK }}"