Cron job for Git pull and Docker build

I’m a dummy when it comes to Linux, so I’d really appreciate competent advice on how to set up the following in the most efficient way possible (cron job?) on my RasPi 4B with Raspian installed:

1. In user pi’s home folder /GitHub/juice-shop check-out master dropping any local changes and then pull from remote
2. If one or more commits without ci skip in the commit message were pulled
3. Run shell script X (which I’ll build the Docker image and push from then)

[bkimminich]

But then my RasPi would need to be callable from the evil Internet, and that’s not going to happen… 😉

I think its using a Pull Model not a Push, so you would not need to expose it to the internet.

You’re right, it doesn’t need to be callable, but https://help.github.com/en/actions/hosting-your-own-runners/about-self-hosted-runners#self-hosted-runner-security-with-public-repositories still says “We recommend that you do not use self-hosted runners with public repositories.” - more due to risks of malicious forks, but the “Threat Model” here is just too unforeseeable to me. With a simple script that only pulls from the master branch of my own checked out repo, things should be safe pretty much all the time for my poor little RasPi.

[github-actions[bot]]

This thread has been automatically locked because it has not had recent activity after it was closed. 🔒 Please open a new issue for regressions or related bugs.