From 04c30658db1b4724c63366213e5787e0efa103b9 Mon Sep 17 00:00:00 2001 From: Adrian Tran Date: Tue, 17 Mar 2026 23:53:00 +0700 Subject: [PATCH 1/3] ci:Test Pipeline --- .github/workflows/blossom-ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/blossom-ci.yml b/.github/workflows/blossom-ci.yml index fa74709..78697e8 100644 --- a/.github/workflows/blossom-ci.yml +++ b/.github/workflows/blossom-ci.yml @@ -34,7 +34,7 @@ jobs: # This job only runs for pull request comments if: | - github.event.comment.body == '/build' && (github.actor == 'hqtran-nv' || github.actor == 'christinayyw') + github.event.comment.body == '/build' && (github.actor == 'hqtran-nv') steps: - name: Check if comment is issued by authorized person run: blossom-ci From d825be41bc6ae32c46247da9936484dd0a139cb5 Mon Sep 17 00:00:00 2001 From: Adrian Tran Date: Fri, 20 Mar 2026 12:09:19 +0700 Subject: [PATCH 2/3] ci: Update Pipeline --- .github/workflows/blossom-ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/blossom-ci.yml b/.github/workflows/blossom-ci.yml index 78697e8..4c79780 100644 --- a/.github/workflows/blossom-ci.yml +++ b/.github/workflows/blossom-ci.yml @@ -46,7 +46,7 @@ jobs: Vulnerability-scan: name: Vulnerability scan needs: [Authorization] - runs-on: vulnerability-scan + runs-on: ubuntu-latest steps: - name: Checkout code uses: actions/checkout@v2 From 68e3dc903e57e1b0e9e7f3390a1e00af72f6d6ab Mon Sep 17 00:00:00 2001 From: Adrian Tran Date: Tue, 12 May 2026 03:44:25 +0700 Subject: [PATCH 3/3] ci: Update authorization check for build trigger in CI workflow --- .github/workflows/blossom-ci.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/blossom-ci.yml b/.github/workflows/blossom-ci.yml index 4c79780..417ce6f 100644 --- a/.github/workflows/blossom-ci.yml +++ b/.github/workflows/blossom-ci.yml @@ -34,11 +34,11 @@ jobs: # This job only runs for pull request comments if: | - github.event.comment.body == '/build' && (github.actor == 'hqtran-nv') + github.event.comment.body == '/build' && contains(fromJSON(vars.AUTHORIZED_USERS), github.actor) steps: - name: Check if comment is issued by authorized person run: blossom-ci - env: + env: OPERATION: 'AUTH' REPO_TOKEN: ${{ secrets.GITHUB_TOKEN }} REPO_KEY_DATA: ${{ secrets.BLOSSOM_KEY }}