From 76fd8b0d6662b4ae2e7eaf60dc5a59eb47e46c0d Mon Sep 17 00:00:00 2001
From: Brad Rydzewski <brad.rydzewski@gmail.com>
Date: Tue, 30 Dec 2014 10:35:44 -0800
Subject: [PATCH] only inject ssk key if private repository or pull request

---
 server/worker/docker/docker.go | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/server/worker/docker/docker.go b/server/worker/docker/docker.go
index d00f77521..39df49d96 100644
--- a/server/worker/docker/docker.go
+++ b/server/worker/docker/docker.go
@@ -122,10 +122,13 @@ func (d *Docker) Do(c context.Context, r *worker.Work) {
 	builder.Build = script
 	builder.Repo = repo
 	builder.Stdout = buf
-	builder.Key = []byte(r.Repo.PrivateKey)
 	builder.Timeout = time.Duration(r.Repo.Timeout) * time.Second
 	builder.Privileged = r.Repo.Privileged
 
+	if r.Repo.Private || len(r.Commit.PullRequest) == 0 {
+		builder.Key = []byte(r.Repo.PrivateKey)
+	}
+
 	// run the build
 	err = builder.Run()