From 6ea91ef5903e9e33cb0dc39a0c62725f4b33c24a Mon Sep 17 00:00:00 2001
From: Thomas Pelletier <pelletier.thomas@gmail.com>
Date: Thu, 11 Apr 2019 13:49:07 +0100
Subject: [PATCH] Do not push Docker images for forked repositories (#272)

For security reasons, CircleCI does not make environment variables
available on forked repositories (often used in PRs). This will still
build the docker image, but won't try to push it to dockerhub.
---
 .circleci/config.yml | 25 +++++++++++++++----------
 1 file changed, 15 insertions(+), 10 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 92254c0..0c13c8e 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -96,19 +96,24 @@ jobs:
             - setup_remote_docker:
                   docker_layer_caching: true
             - run: docker build -t pelletier/go-toml:$CIRCLE_SHA1 .
-            - run: docker login -u $DOCKER_USER -p $DOCKER_PASS
             - run:
                 name: "Publish docker image"
                 command: |
-                    IMAGE_NAME="pelletier/go-toml"
-                    IMAGE_SHA_TAG="${IMAGE_NAME}:$CIRCLE_SHA1"
-                    if [ "${CIRCLE_BRANCH}" = "master" ]; then
-                        docker tag ${IMAGE_SHA_TAG} ${IMAGE_NAME}:latest
-                        docker push ${IMAGE_NAME}:latest
-                    fi
-                    if [ "${CIRCLE_TAG}" != "" ]; then
-                        docker tag ${IMAGE_SHA_TAG} ${IMAGE_NAME}:${CIRCLE_TAG}
-                        docker push ${IMAGE_NAME}:${CIRCLE_TAG}
+                    if [ "${CIRCLE_PR_REPONAME}" == "" ]; then
+                      IMAGE_NAME="pelletier/go-toml"
+                      IMAGE_SHA_TAG="${IMAGE_NAME}:$CIRCLE_SHA1"
+                      if [ "${CIRCLE_BRANCH}" = "master" ]; then
+                          docker login -u $DOCKER_USER -p $DOCKER_PASS
+                          docker tag ${IMAGE_SHA_TAG} ${IMAGE_NAME}:latest
+                          docker push ${IMAGE_NAME}:latest
+                      fi
+                      if [ "${CIRCLE_TAG}" != "" ]; then
+                          docker login -u $DOCKER_USER -p $DOCKER_PASS
+                          docker tag ${IMAGE_SHA_TAG} ${IMAGE_NAME}:${CIRCLE_TAG}
+                          docker push ${IMAGE_NAME}:${CIRCLE_TAG}
+                      fi
+                    else
+                      echo "not pushing docker image for forked repo"
                     fi
 
 workflows: