travis: skip login+push for pull requests

diff --git a/travis/docker-build-and-push.sh b/travis/docker-build-and-push.sh
index 7dfd3392b346604e02dfd43702cc3d369f2c8a1b..76e2a1322d3728755741fb1111dd9d084732d949 100755 (executable)
--- a/travis/docker-build-and-push.sh
+++ b/travis/docker-build-and-push.sh
@@ -7,5 +7,11 @@ set -e
 echo .git > .dockerignore
 
 docker build --pull --no-cache --rm -t=${BASENAME} -f travis-build.Dockerfile .
-docker login -e ${DOCKER_EMAIL} -u ${DOCKER_USER} -p ${DOCKER_PASS}
-docker push ${BASENAME}
+# For pull requests, travis does not add secure environment variables to the
+# environment (because pull requests could then steal their values), so skip
+# the login+push step when the variable isn’t set.
+if [ -n "${DOCKER_PASS}" ]
+then
+       docker login -e ${DOCKER_EMAIL} -u ${DOCKER_USER} -p ${DOCKER_PASS}
+       docker push ${BASENAME}
+fi