Merge pull request linode#279 from lgarber-akamai/fix/acctest-vuln

fix: Use full-length SHA refs in testing workflow
lgarber-akamai · Oct 28, 2022 · 99dd6af · 99dd6af
2 parents 92aa0a5 + b3acae0
commit 99dd6af
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/integration_tests_pr.yml b/.github/workflows/integration_tests_pr.yml
@@ -13,7 +13,7 @@ jobs:
       github.event_name == 'repository_dispatch' &&
       github.event.client_payload.slash_command.sha != '' &&
       github.event.client_payload.slash_command.tests != '' &&
-      contains(github.event.client_payload.pull_request.head.sha, github.event.client_payload.slash_command.sha)
+      github.event.client_payload.pull_request.head.sha == github.event.client_payload.slash_command.sha
 
     steps:
       - uses: actions/setup-go@37335c7bb261b353407cff977110895fa0b4f7d8 # pin@v2
@@ -31,7 +31,7 @@ jobs:
       - name: Checkout PR
         uses: actions/checkout@v2
         with:
-          ref: 'refs/pull/${{ github.event.client_payload.pull_request.number }}/merge'
+          ref: ${{ github.event.client_payload.slash_command.sha }}
 
       - run: make ARGS="-run ${{ github.event.client_payload.slash_command.tests }}" fixtures
         if: ${{ steps.validate-tests.outputs.match == '' }}