File tree Expand file tree Collapse file tree 1 file changed +7
-7
lines changed
Expand file tree Collapse file tree 1 file changed +7
-7
lines changed Original file line number Diff line number Diff line change 11name : Checking CLA Signature
22# https://docs.github.com/en/actions/reference/context-and-expression-syntax-for-github-actions#github-context
3- # The pull request target event provides RW token to github
3+ # The pull request target event provides RW token to github
44# https://github.blog/2020-08-03-github-actions-improvements-for-fork-and-pull-request-workflows/
55# But `on: pull_request_target` should be avoided due to security
66# reasons. Read more: [SEC_ADV_1] https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
7- #
7+ #
88# We will use a mix of github pull_request that does not provide any write access to pull requests on forks
99# and workflow event, as discussed in [SEC_ADV_1]
1010
11- on :
11+ on :
1212 pull_request :
1313 branches :
1414 - main
4545 cat ./.tmp/github.json
4646 echo "commit details: "
4747 cat ./.tmp/commitDetails.json
48-
48+
4949 - name : Review pull request
5050 run : |
5151 which git
@@ -58,12 +58,12 @@ jobs:
5858 env :
5959 EMPLOYER_CLA_LINK : https://raw.githubusercontent.com/aicore/contributor-license-agreement/main/employer_contributor_license_agreement.md
6060 PERSONAL_CLA_LINK : https://raw.githubusercontent.com/aicore/contributor-license-agreement/main/personal_contributor_licence_agreement.md
61-
62- - uses : actions/upload-artifact@v3
61+
62+ - uses : actions/upload-artifact@v4
6363 with :
6464 name : prcontext
6565 path : .tmp/
66-
66+
6767 - name : Fail on validation errors
6868 run : |
6969 FILE=./.tmp/failed
You can’t perform that action at this time.
0 commit comments