Skip to content

Commit b61a47f

Browse files
authored
Run snyk check in periodic build for each development branch (elastic#133751) (elastic#133756)
we filter by regex for common name pattern of the dev branches to reduce risk of running from development branch. in reality those periodic builds are not likely to be triggered by developers so this is a good enough compromise. Branches that are not developed anymore will stay in snyk for now and require manual removal.
1 parent 837de5c commit b61a47f

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

.buildkite/pipelines/periodic.template.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -217,7 +217,7 @@ steps:
217217
image: family/elasticsearch-ubuntu-2404
218218
machineType: n2-standard-8
219219
buildDirectory: /dev/shm/bk
220-
if: build.branch == "main" || build.branch == "9.1" || build.branch == "9.0" || build.branch == "8.19" || build.branch == "8.18" || build.branch == "7.17"
220+
if: build.branch =~ /^(main|\d+\.\d+|\d+\.x)$/
221221
- label: check-branch-consistency
222222
command: .ci/scripts/run-gradle.sh branchConsistency
223223
timeout_in_minutes: 15

.buildkite/pipelines/periodic.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -921,7 +921,7 @@ steps:
921921
image: family/elasticsearch-ubuntu-2404
922922
machineType: n2-standard-8
923923
buildDirectory: /dev/shm/bk
924-
if: build.branch == "main" || build.branch == "9.1" || build.branch == "9.0" || build.branch == "8.19" || build.branch == "8.18" || build.branch == "7.17"
924+
if: build.branch =~ /^(main|\d+\.\d+|\d+\.x)$/
925925
- label: check-branch-consistency
926926
command: .ci/scripts/run-gradle.sh branchConsistency
927927
timeout_in_minutes: 15

0 commit comments

Comments
 (0)