ci: replace tj-actions/changed-files with a local action

Drop the dependency on tj-actions/changed-files and replace it with a local
composite action. Especially given it was compromised in the past - see
CVE-2025-30066.

The action diffs HEAD^1..HEAD of the PR merge commit that actions/checkout
checks out by default. It fails if HEAD is not a merge commit, so a change to
the checkout ref can't silently diff the wrong range.

With this in place, both of the workflows can share a consistent list of paths.

Signed-off-by: Andrei Gherzan <andrei@gherzan.com>
This commit is contained in:
Andrei Gherzan committed 2026-10-19 04:47:42 +01:00
1 parent 6c1080f564
commit 3efe6589e8
3 files changed
+56 -31

No files matched your search

+2 -15
View File
@@ -35,22 +35,9 @@ jobs:
uses: actions/checkout@v3
with:
fetch-depth: 0
- name: Define Yocto build files
- name: Check for Yocto relevant changes
id: changed-files-specific
uses: tj-actions/changed-files@v24
with:
files: |
.github/actions/**
.github/workflows/docker-images/yocto-builder/**
.github/workflows/docker-images/*.sh
.github/workflows/yocto-builds.yml
classes/**
conf/**
dynamic-layers/**
files/**
lib/**
recipes-**
wic/**
uses: ./.github/actions/changed-files
- name: Build a temporary yocto-builder image
uses: ./.github/actions/docker-build
with:
+2 -16
View File
@@ -18,23 +18,9 @@ jobs:
uses: actions/checkout@v3
with:
fetch-depth: 0
- name: Define Yocto build files
- name: Check for Yocto relevant changes
id: changed-files-specific
uses: tj-actions/changed-files@v24
with:
files: |
.github/actions/**
.github/workflows/docker-images/yocto-builder/**
.github/workflows/docker-images/*.sh
.github/workflows/yocto-builds.yml
.github/workflows/yocto-layer.yml
classes/**
conf/**
dynamic-layers/**
files/**
lib/**
recipes-**
wic/**
uses: ./.github/actions/changed-files
- name: Build a temporary yocto-builder image
uses: ./.github/actions/docker-build
with: