mirror of
https://git.yoctoproject.org/meta-raspberrypi
synced 2026-10-21 17:48:11 +00:00
ci: replace tj-actions/changed-files with a local action
Drop the dependency on tj-actions/changed-files and replace it with a local composite action. Especially given it was compromised in the past - see CVE-2025-30066. The action diffs HEAD^1..HEAD of the PR merge commit that actions/checkout checks out by default. It fails if HEAD is not a merge commit, so a change to the checkout ref can't silently diff the wrong range. With this in place, both of the workflows can share a consistent list of paths. Signed-off-by: Andrei Gherzan <andrei@gherzan.com>
This commit is contained in:
3 files changed
+56
-31
No files matched your search
@@ -35,22 +35,9 @@ jobs:
|
||||
uses: actions/checkout@v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
- name: Define Yocto build files
|
||||
- name: Check for Yocto relevant changes
|
||||
id: changed-files-specific
|
||||
uses: tj-actions/changed-files@v24
|
||||
with:
|
||||
files: |
|
||||
.github/actions/**
|
||||
.github/workflows/docker-images/yocto-builder/**
|
||||
.github/workflows/docker-images/*.sh
|
||||
.github/workflows/yocto-builds.yml
|
||||
classes/**
|
||||
conf/**
|
||||
dynamic-layers/**
|
||||
files/**
|
||||
lib/**
|
||||
recipes-**
|
||||
wic/**
|
||||
uses: ./.github/actions/changed-files
|
||||
- name: Build a temporary yocto-builder image
|
||||
uses: ./.github/actions/docker-build
|
||||
with:
|
||||
|
||||
@@ -18,23 +18,9 @@ jobs:
|
||||
uses: actions/checkout@v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
- name: Define Yocto build files
|
||||
- name: Check for Yocto relevant changes
|
||||
id: changed-files-specific
|
||||
uses: tj-actions/changed-files@v24
|
||||
with:
|
||||
files: |
|
||||
.github/actions/**
|
||||
.github/workflows/docker-images/yocto-builder/**
|
||||
.github/workflows/docker-images/*.sh
|
||||
.github/workflows/yocto-builds.yml
|
||||
.github/workflows/yocto-layer.yml
|
||||
classes/**
|
||||
conf/**
|
||||
dynamic-layers/**
|
||||
files/**
|
||||
lib/**
|
||||
recipes-**
|
||||
wic/**
|
||||
uses: ./.github/actions/changed-files
|
||||
- name: Build a temporary yocto-builder image
|
||||
uses: ./.github/actions/docker-build
|
||||
with:
|
||||
|
||||
Reference in new issue
Block a user