Re-enable safe to test label (#3111)

Author: ehl-jf

.github/workflows/accessTests.yml

@@ -6,7 +6,7 @@ on:
       - "master"
   # Triggers the workflow on PRs to master branch only.
   pull_request_target:
-    types: [opened, synchronize]
+    types: [opened, synchronize, labeled]
     branches:
       - "master"
 
@@ -20,6 +20,7 @@ permissions:
 jobs:
   Access-Tests:
     name: Access tests (${{ matrix.os.name }})
+    if: github.event_name == 'workflow_dispatch' || github.event_name == 'push' || (github.event_name == 'pull_request_target' && (github.event.action != 'labeled' || contains(github.event.pull_request.labels.*.name, 'safe to test')))
     strategy:
       fail-fast: false
       matrix:

.github/workflows/artifactoryTests.yml

@@ -6,7 +6,7 @@ on:
       - "master"
   # Triggers the workflow on PRs to master branch only.
   pull_request_target:
-    types: [opened, synchronize]
+    types: [opened, synchronize, labeled]
     branches:
       - "master"
 
@@ -17,6 +17,7 @@ concurrency:
 jobs:
   Artifactory-Tests:
     name: ${{ matrix.suite }} ${{ matrix.os.name }}
+    if: github.event_name == 'workflow_dispatch' || github.event_name == 'push' || (github.event_name == 'pull_request_target' && (github.event.action != 'labeled' || contains(github.event.pull_request.labels.*.name, 'safe to test')))
     strategy:
       fail-fast: false
       matrix:

.github/workflows/distributionTests.yml

@@ -6,7 +6,7 @@ on:
       - "master"
   # Triggers the workflow on PRs to master branch only.
   pull_request_target:
-    types: [opened, synchronize]
+    types: [opened, synchronize, labeled]
     branches:
       - "master"
 
@@ -17,6 +17,7 @@ concurrency:
 jobs:
   Distribution-Tests:
     name: Distribution tests (${{ matrix.os }})
+    if: github.event_name == 'workflow_dispatch' || github.event_name == 'push' || (github.event_name == 'pull_request_target' && (github.event.action != 'labeled' || contains(github.event.pull_request.labels.*.name, 'safe to test')))
     strategy:
       fail-fast: false
       matrix:

.github/workflows/dockerTests.yml

@@ -6,7 +6,7 @@ on:
       - "master"
   # Triggers the workflow on PRs to master branch only.
   pull_request_target:
-    types: [opened, synchronize]
+    types: [opened, synchronize, labeled]
     branches:
       - "master"
 
@@ -17,6 +17,7 @@ concurrency:
 jobs:
   Docker-tests:
     name: Docker tests (${{ matrix.os.name }})
+    if: github.event_name == 'workflow_dispatch' || github.event_name == 'push' || (github.event_name == 'pull_request_target' && (github.event.action != 'labeled' || contains(github.event.pull_request.labels.*.name, 'safe to test')))
     strategy:
       matrix:
         os:

.github/workflows/frogbot-scan-pull-request.yml

@@ -9,10 +9,8 @@ permissions:
   contents: read
 jobs:
   scan-pull-request:
+    if: ${{ github.actor != 'dependabot[bot]' }}
     runs-on: ubuntu-latest
-    # A pull request needs to be approved before Frogbot scans it. Any GitHub user who is associated with the
-    # "frogbot" GitHub environment can approve the pull request to be scanned.
-    environment: frogbot
     steps:
       - name: Setup Go with cache
         uses: jfrog/.github/actions/install-go-with-cache@main

.github/workflows/goTests.yml

@@ -6,7 +6,7 @@ on:
       - "master"
   # Triggers the workflow on PRs to master branch only.
   pull_request_target:
-    types: [opened, synchronize]
+    types: [opened, synchronize, labeled]
     branches:
       - "master"
 
@@ -18,6 +18,7 @@ jobs:
   GO-tests:
     # Go modules doesn't allow passing credentials to a private registry using an HTTP URL. Therefore, the Go tests run against a remote Artifactory server.
     name: Go tests (${{ matrix.os }})
+    if: github.event_name == 'workflow_dispatch' || github.event_name == 'push' || (github.event_name == 'pull_request_target' && (github.event.action != 'labeled' || contains(github.event.pull_request.labels.*.name, 'safe to test')))
     strategy:
       fail-fast: false
       matrix:

.github/workflows/gradleTests.yml

@@ -6,7 +6,7 @@ on:
       - "master"
   # Triggers the workflow on PRs to master branch only.
   pull_request_target:
-    types: [opened, synchronize]
+    types: [opened, synchronize, labeled]
     branches:
       - "master"
 
@@ -17,6 +17,7 @@ concurrency:
 jobs:
   Gradle-Tests:
     name: ${{ matrix.os.name }}-gradle-${{ matrix.gradle-version }}
+    if: github.event_name == 'workflow_dispatch' || github.event_name == 'push' || (github.event_name == 'pull_request_target' && (github.event.action != 'labeled' || contains(github.event.pull_request.labels.*.name, 'safe to test')))
     strategy:
       fail-fast: false
       matrix:

.github/workflows/lifecycleTests.yml

@@ -8,7 +8,7 @@ on:
       - "master"
   # Triggers the workflow on PRs to master branch only.
   pull_request_target:
-    types: [opened, synchronize]
+    types: [opened, synchronize, labeled]
     branches:
       - "master"
 
@@ -19,6 +19,7 @@ concurrency:
 jobs:
   Lifecycle-Tests:
     name: Lifecycle tests (${{ matrix.os }})
+    if: github.event_name == 'workflow_dispatch' || github.event_name == 'push' || (github.event_name == 'pull_request_target' && (github.event.action != 'labeled' || contains(github.event.pull_request.labels.*.name, 'safe to test')))
     strategy:
       fail-fast: false
       matrix:

.github/workflows/mavenTests.yml

@@ -6,7 +6,7 @@ on:
       - "master"
   # Triggers the workflow on PRs to master branch only.
   pull_request_target:
-    types: [opened, synchronize]
+    types: [opened, synchronize, labeled]
     branches:
       - "master"
 
@@ -17,6 +17,7 @@ concurrency:
 jobs:
   Maven-Tests:
     name: Maven tests (${{ matrix.os.name }})
+    if: github.event_name == 'workflow_dispatch' || github.event_name == 'push' || (github.event_name == 'pull_request_target' && (github.event.action != 'labeled' || contains(github.event.pull_request.labels.*.name, 'safe to test')))
     strategy:
       fail-fast: false
       matrix:

.github/workflows/npmTests.yml

@@ -6,7 +6,7 @@ on:
       - "master"
   # Triggers the workflow on PRs to master branch only.
   pull_request_target:
-    types: [opened, synchronize]
+    types: [opened, synchronize, labeled]
     branches:
       - "master"
 
@@ -17,6 +17,7 @@ concurrency:
 jobs:
   npm-Tests:
     name: npm tests (${{ matrix.os.name }})
+    if: github.event_name == 'workflow_dispatch' || github.event_name == 'push' || (github.event_name == 'pull_request_target' && (github.event.action != 'labeled' || contains(github.event.pull_request.labels.*.name, 'safe to test')))
     strategy:
       fail-fast: false
       matrix: