mirror of
https://github.com/containers/podman.git
synced 2025-05-20 08:36:23 +08:00
Scanning-secrets: Support new-branch/renovate link
Signed-off-by: Chris Evich <cevich@redhat.com>
This commit is contained in:
6
.github/workflows/scan-secrets.yml
vendored
6
.github/workflows/scan-secrets.yml
vendored
@ -81,6 +81,12 @@ jobs:
|
||||
name: Provide URL showing code that needs human eyes (force-push or merge)
|
||||
shell: bash
|
||||
run: |
|
||||
if [[ "$before" =~ ^0000+ ]]; then # Push to new branch (i.e. renovate branch)
|
||||
echo "Please review newly opened branch for secret-leaks:"
|
||||
# The event JSON provides the URL we need
|
||||
jq -r -e '.compare' $GITHUB_EVENT_PATH
|
||||
return 0
|
||||
fi
|
||||
echo "Please review force-push or merged-pr changes for secret-leaks:"
|
||||
before=$(jq -r -e '.before' $GITHUB_EVENT_PATH)
|
||||
after=$(jq -r -e '.after' $GITHUB_EVENT_PATH)
|
||||
|
Reference in New Issue
Block a user