Skip to content

Slim security-audit-required to a single conditional check#24

Merged
chrisdp merged 1 commit into
masterfrom
task/security-audit-slim-gate
May 20, 2026
Merged

Slim security-audit-required to a single conditional check#24
chrisdp merged 1 commit into
masterfrom
task/security-audit-slim-gate

Conversation

@chrisdp
Copy link
Copy Markdown
Contributor

@chrisdp chrisdp commented May 20, 2026

Summary

Replaces the bash event/head_ref check inside security-audit-required with a step-level if:. Matches the success-or-skip pattern in make-release-artifacts.yml.

Same behavior:

  • Step runs on push to master, the nightly cron, and release/* PRs.
  • On non-release PRs the step is skipped, the job still reports success, the gate stays green.
  • On release contexts the step exits 1 iff the upstream audit job failed.

Test plan

Drops the explicit logging and the bash event/head_ref check in favor
of a step-level if:, matching the success-or-skip pattern in
make-release-artifacts.yml.
@chrisdp chrisdp enabled auto-merge May 20, 2026 20:09
@chrisdp chrisdp merged commit 4dd342f into master May 20, 2026
7 checks passed
@chrisdp chrisdp deleted the task/security-audit-slim-gate branch May 20, 2026 20:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant