chore: harden the production condition to prevent incorrect deployment

Author: acolombier

.github/workflows/deploy.yml

@@ -13,9 +13,9 @@ jobs:
     if: github.event_name == 'push' || (github.event.action != 'closed' && github.event.action != 'labeled')
     uses: ./.github/workflows/ovh.yaml
     with:
-      environment_name: ${{ github.event_name == 'push' && 'production' || format('pull/{0}', github.event.pull_request.number) }}
-      url: ${{ github.event_name == 'pull_request_target' && format('https://{0}/pr/{1}', vars.PREVIEW_WEBSITE, github.event.pull_request.number) || format('https://{0}', vars.MAIN_WEBSITE) }}
-      target: ${{ github.event_name == 'pull_request_target' && format('pulls/pr/{0}', github.event.pull_request.number) || 'www' }}
+      environment_name: ${{ contains(fromJSON('["push", "workflow_dispatch"]'), github.event_name) && 'production' || format('pull/{0}', github.event.pull_request.number) }}
+      url: ${{ contains(fromJSON('["push", "workflow_dispatch"]'), github.event_name) && 'production' && format('https://{0}', vars.MAIN_WEBSITE) || format('https://{0}/pr/{1}', vars.PREVIEW_WEBSITE, github.event.pull_request.number) }}
+      target: ${{ contains(fromJSON('["push", "workflow_dispatch"]'), github.event_name) && 'production' && 'www' || format('pulls/pr/{0}', github.event.pull_request.number) }}
       action: deploy
     secrets: inherit