fix: require LuaRocks token only for uploads #3
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "fix/api-key-only-for-upload"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Problem
The action currently requires LUAROCKS_API_KEY before it knows whether the run will upload. Pull-request dry runs should validate rockspec generation and install behavior without requiring publish secrets.
Solution
Detect pull-request runs before reading upload-only secrets, require LUAROCKS_API_KEY only for upload runs, and add entrypoint coverage for both upload and PR modes.
Verification
c68f1a4efbtod450415175d450415175cf70e95db5