mirror of
https://github.com/Unleash/unleash.git
synced 2025-09-15 17:50:48 +02:00
chore: avoids code injection through git commit (#4147)
## About the changes Avoids code injection via the committer name or email Also removes pushing to s3 on `main` folder as it's not used and we're already pushing to `commits` folder
This commit is contained in:
parent
321265e0ed
commit
1f7a948f6d
8
.github/workflows/build.yaml
vendored
8
.github/workflows/build.yaml
vendored
@ -46,11 +46,3 @@ jobs:
|
|||||||
CI: true
|
CI: true
|
||||||
TEST_DATABASE_URL: postgres://postgres:postgres@localhost:5432/postgres
|
TEST_DATABASE_URL: postgres://postgres:postgres@localhost:5432/postgres
|
||||||
DATABASE_URL: postgres://postgres:postgres@localhost:5432/postgres
|
DATABASE_URL: postgres://postgres:postgres@localhost:5432/postgres
|
||||||
- uses: aws-actions/configure-aws-credentials@v2
|
|
||||||
with:
|
|
||||||
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
|
|
||||||
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
|
|
||||||
aws-region: ${{ secrets.AWS_DEFAULT_REGION }}
|
|
||||||
- name: Publish static assets to S3
|
|
||||||
run: |
|
|
||||||
aws s3 cp frontend/build s3://getunleash-static/unleash/main/$(git rev-parse HEAD) --recursive
|
|
||||||
|
4
.github/workflows/notify_enterprise.yaml
vendored
4
.github/workflows/notify_enterprise.yaml
vendored
@ -26,6 +26,8 @@ jobs:
|
|||||||
- uses: actions/checkout@v3
|
- uses: actions/checkout@v3
|
||||||
- name: Trigger sync
|
- name: Trigger sync
|
||||||
uses: actions/github-script@v6
|
uses: actions/github-script@v6
|
||||||
|
env:
|
||||||
|
COMMIT_ACTOR: ${{ github.event.commits[0].author.name }} <${{ github.event.commits[0].author.email }}>
|
||||||
with:
|
with:
|
||||||
github-token: ${{ secrets.UNLEASH_CI_BUILDER_GITHUB_TOKEN }}
|
github-token: ${{ secrets.UNLEASH_CI_BUILDER_GITHUB_TOKEN }}
|
||||||
script: |
|
script: |
|
||||||
@ -36,7 +38,7 @@ jobs:
|
|||||||
ref: 'master',
|
ref: 'master',
|
||||||
inputs: {
|
inputs: {
|
||||||
commit: "${{ github.event.head_commit.id }}",
|
commit: "${{ github.event.head_commit.id }}",
|
||||||
actor: "${{ github.event.commits[0].author.name }} <${{ github.event.commits[0].author.email }}>",
|
actor: "${{ env.COMMIT_ACTOR }}",
|
||||||
message: ${{ toJSON(github.event.head_commit.message) }},
|
message: ${{ toJSON(github.event.head_commit.message) }},
|
||||||
}
|
}
|
||||||
})
|
})
|
||||||
|
Loading…
Reference in New Issue
Block a user