Skip to content

Commit

Permalink
testing commit signing
Browse files Browse the repository at this point in the history
  • Loading branch information
aalu1418 committed Feb 15, 2024
1 parent 41a616d commit cba0e41
Showing 1 changed file with 5 additions and 2 deletions.
7 changes: 5 additions & 2 deletions .github/workflows/dependency-updates.yml
Original file line number Diff line number Diff line change
Expand Up @@ -30,9 +30,11 @@ jobs:
echo "skip=true" >> "$GITHUB_OUTPUT"
fi
- name: "Create new branch if needed"
id: branch
if: '!steps.check.outputs.skip'
run: |

Check failure on line 35 in .github/workflows/dependency-updates.yml

View workflow job for this annotation

GitHub Actions / actionlint

[actionlint] .github/workflows/dependency-updates.yml#L35

shellcheck reported issue in this script: SC2086:info:1:62: Double quote to prevent globbing and word splitting [shellcheck]
Raw output
.github/workflows/dependency-updates.yml:35:9: shellcheck reported issue in this script: SC2086:info:1:62: Double quote to prevent globbing and word splitting [shellcheck]

Check failure on line 35 in .github/workflows/dependency-updates.yml

View workflow job for this annotation

GitHub Actions / actionlint

[actionlint] .github/workflows/dependency-updates.yml#L35

"github.head_ref" is potentially untrusted. avoid using it directly in inline scripts. instead, pass it through an environment variable. see https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions for more details [expression]
Raw output
.github/workflows/dependency-updates.yml:35:33: "github.head_ref" is potentially untrusted. avoid using it directly in inline scripts. instead, pass it through an environment variable. see https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions for more details [expression]
git branch "bump/solana-${{ steps.solImage.outputs.image }}-test" # TODO: remove suffix
echo "original=${{ github.head_ref || github.ref_name }}" >> $GITHUB_OUTPUT
git checkout -b "bump/solana-${{ steps.solImage.outputs.image }}-test" # TODO: remove suffix
git push origin "bump/solana-${{ steps.solImage.outputs.image }}-test" # TODO: remove suffix
- uses: planetscale/[email protected]
if: '!steps.check.outputs.skip'
Expand All @@ -47,8 +49,9 @@ jobs:
uses: peter-evans/create-pull-request@b1ddad2c994a25fbc81a28b3ec0e368bb2021c50 # v6.0.0
with:
title: "[automated] bump solana image to ${{ steps.solImage.outputs.image }}"
base: ${{ steps.branch.outputs.original }}
branch: bump/solana-${{ steps.solImage.outputs.image }}-test # TODO: remove suffix
# author: "github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>"
author: "github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>"
reviewers: aalu1418
body: |
Latest Solana mainnet release is [\"${{ steps.solImage.outputs.image }}\"](https://github.com/solana-labs/solana/releases/latest)
Expand Down

0 comments on commit cba0e41

Please sign in to comment.