From 4df73d644fab4e58cedc53fe4c126bab2f8e9c57 Mon Sep 17 00:00:00 2001
From: Alessandro Nadalini <70582533+alenad95@users.noreply.github.com>
Date: Thu, 26 Mar 2026 09:37:13 +0100
Subject: [PATCH 1/2] Revert "Potential fix for pull request finding"

This reverts commit c40eedff28348951c690a50b2cd78e37ea484b09.
---
 .github/workflows/gitlab-ci.yml | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/.github/workflows/gitlab-ci.yml b/.github/workflows/gitlab-ci.yml
index 55c42ae..f346c8d 100644
--- a/.github/workflows/gitlab-ci.yml
+++ b/.github/workflows/gitlab-ci.yml
@@ -13,9 +13,6 @@ on:
   pull_request_target:
   workflow_dispatch:
 
-permissions:
-  contents: read
-
 jobs:
   # Internal PRs and pushes: run directly with secrets available.
   gitlab-ci-internal:

From 39ade492b4090af4d662a8aaead96ec5dcb643f6 Mon Sep 17 00:00:00 2001
From: Alessandro Nadalini <70582533+alenad95@users.noreply.github.com>
Date: Thu, 26 Mar 2026 09:37:13 +0100
Subject: [PATCH 2/2] Revert "Modified gitlab-ci.yml to enable CI also for PRs
 coming from external forks"

This reverts commit e3b48550092dc75fb2d55dc8c411171100f3a149.
---
 .github/workflows/gitlab-ci.yml | 28 +++-------------------------
 1 file changed, 3 insertions(+), 25 deletions(-)

diff --git a/.github/workflows/gitlab-ci.yml b/.github/workflows/gitlab-ci.yml
index f346c8d..b11676a 100644
--- a/.github/workflows/gitlab-ci.yml
+++ b/.github/workflows/gitlab-ci.yml
@@ -10,38 +10,16 @@ on:
     branches:
       - main
   pull_request:
-  pull_request_target:
   workflow_dispatch:
 
 jobs:
-  # Internal PRs and pushes: run directly with secrets available.
-  gitlab-ci-internal:
-    if: >
-      github.event_name != 'pull_request_target' &&
-      (
-        github.event_name != 'pull_request' ||
-        github.event.pull_request.head.repo.full_name == github.repository
-      )
+  gitlab-ci:
     runs-on: ubuntu-latest
     steps:
       - name: Check GitLab CI
         uses: pulp-platform/pulp-actions/gitlab-ci@v1
-        with:
-          domain: iis-git.ee.ethz.ch
-          repo: github-mirror/magia
-          token: ${{ secrets.GITLAB_TOKEN }}
-          poll-count: 2160
-
-  # Fork PRs: require maintainer approval before secrets are exposed.
-  gitlab-ci-external:
-    if: >
-      github.event_name == 'pull_request_target' &&
-      github.event.pull_request.head.repo.full_name != github.repository
-    runs-on: ubuntu-latest
-    environment: external-prs
-    steps:
-      - name: Check GitLab CI
-        uses: pulp-platform/pulp-actions/gitlab-ci@v1
+        # Skip on forks or pull requests from forks due to missing secrets.
+        if: github.repository == 'pulp-platform/MAGIA' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
         with:
           domain: iis-git.ee.ethz.ch
           repo: github-mirror/magia