CVE-2021-23386 found in trivy scan cypress version is 13.3.3 #7702
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: 'Triage: route to team project board' | |
| on: | |
| # makes this workflow reusable | |
| workflow_call: | |
| secrets: | |
| ADD_TO_TRIAGE_BOARD_TOKEN: | |
| required: true | |
| issues: | |
| types: | |
| - labeled | |
| jobs: | |
| route-to-e2e: | |
| if: github.event.label.name == 'routed-to-e2e' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Get project data | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.ADD_TO_TRIAGE_BOARD_TOKEN }} | |
| ORGANIZATION: 'cypress-io' | |
| PROJECT_NUMBER: 10 | |
| run: | | |
| gh api graphql -f query=' | |
| query($org: String!, $number: Int!) { | |
| organization(login: $org){ | |
| projectV2(number: $number) { | |
| id | |
| } | |
| } | |
| }' -f org=$ORGANIZATION -F number=$PROJECT_NUMBER > project_data.json | |
| echo 'PROJECT_ID='$(jq -r '.data.organization.projectV2.id' project_data.json) >> $GITHUB_ENV | |
| - name: add issue to e2e project | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.ADD_TO_TRIAGE_BOARD_TOKEN }} | |
| ISSUE_ID: ${{ github.event.issue.node_id }} | |
| run: | | |
| gh api graphql -f query=' | |
| mutation($project:ID!, $issue:ID!) { | |
| addProjectV2ItemById(input: {projectId: $project, contentId: $issue}) { | |
| item { | |
| id | |
| } | |
| } | |
| }' -f project=$PROJECT_ID -f issue=$ISSUE_ID |