Skip to content

Commit 524bc6d

Browse files
authored
Run snyk check in periodic build for each development branch (#133751) (#133755)
we filter by regex for common name pattern of the dev branches to reduce risk of running from development branch. in reality those periodic builds are not likely to be triggered by developers so this is a good enough compromise. Branches that are not developed anymore will stay in snyk for now and require manual removal.
1 parent 83a6e7a commit 524bc6d

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

.buildkite/pipelines/periodic.template.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -232,7 +232,7 @@ steps:
232232
image: family/elasticsearch-ubuntu-2404
233233
machineType: n2-standard-8
234234
buildDirectory: /dev/shm/bk
235-
if: build.branch == "main" || build.branch == "9.1" || build.branch == "9.0" || build.branch == "8.19" || build.branch == "8.18" || build.branch == "7.17"
235+
if: build.branch =~ /^(main|\d+\.\d+|\d+\.x)$/
236236
- label: check-branch-consistency
237237
command: .ci/scripts/run-gradle.sh branchConsistency
238238
timeout_in_minutes: 15

.buildkite/pipelines/periodic.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -613,7 +613,7 @@ steps:
613613
image: family/elasticsearch-ubuntu-2404
614614
machineType: n2-standard-8
615615
buildDirectory: /dev/shm/bk
616-
if: build.branch == "main" || build.branch == "9.1" || build.branch == "9.0" || build.branch == "8.19" || build.branch == "8.18" || build.branch == "7.17"
616+
if: build.branch =~ /^(main|\d+\.\d+|\d+\.x)$/
617617
- label: check-branch-consistency
618618
command: .ci/scripts/run-gradle.sh branchConsistency
619619
timeout_in_minutes: 15

0 commit comments

Comments
 (0)