Skip to content

workflows/tests: fix template-injection zizmor info#201306

Merged
woodruffw merged 1 commit into
masterfrom
zizmor-tests-template-injection
Dec 16, 2024
Merged

workflows/tests: fix template-injection zizmor info#201306
woodruffw merged 1 commit into
masterfrom
zizmor-tests-template-injection

Conversation

@samford

@samford samford commented Dec 16, 2024

Copy link
Copy Markdown
Member
  • Have you followed the guidelines for contributing?
  • Have you ensured that your commits follow the commit style guide?
  • Have you checked that there aren't other open pull requests for the same formula update/change?
  • Have you built your formula locally with HOMEBREW_NO_INSTALL_FROM_API=1 brew install --build-from-source <formula>, where <formula> is the name of the formula you're submitting?
  • Is your test running fine brew test <formula>, where <formula> is the name of the formula you're submitting?
  • Does your build pass brew audit --strict <formula> (after doing HOMEBREW_NO_INSTALL_FROM_API=1 brew install --build-from-source <formula>)? If this is a new formula, does it pass brew audit --new <formula>?

This updates workflows/tests.yml to use environment variables to address template-injection info from zizmor.

@samford samford requested review from a team and MikeMcQuaid as code owners December 16, 2024 00:40
@github-actions github-actions Bot added automerge-skip `brew pr-automerge` will skip this pull request workflows PR modifies GitHub Actions workflow files labels Dec 16, 2024
Comment thread .github/workflows/tests.yml Outdated
This updates `workflows/tests.yml` to use environment variables to
address `template-injection` info from `zizmor`.
@samford samford force-pushed the zizmor-tests-template-injection branch from 04036fe to a97fcdc Compare December 16, 2024 01:19
@woodruffw woodruffw added this pull request to the merge queue Dec 16, 2024
Merged via the queue into master with commit 656b27e Dec 16, 2024
@woodruffw woodruffw deleted the zizmor-tests-template-injection branch December 16, 2024 02:46
@daeho-ro

Copy link
Copy Markdown
Member

Now our CI cannot recognize formula name, maybe should roll-back?

ZhongRuoyu added a commit that referenced this pull request Dec 16, 2024
The double quoting of formula names is broken after #201306. Let's fix
it by moving out the double-quoted formula names to a separate variable.
Should fix the failure seen in [1].

[1]: https://github.com/Homebrew/homebrew-core/actions/runs/12345589565/job/34449970508?pr=201322
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automerge-skip `brew pr-automerge` will skip this pull request workflows PR modifies GitHub Actions workflow files

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants