Skip to content

Move vault-1.14.advisories.yaml to enterprise-advisories. #8944

Move vault-1.14.advisories.yaml to enterprise-advisories.

Move vault-1.14.advisories.yaml to enterprise-advisories. #8944

Workflow file for this run

name: Validate
on:
pull_request:
branches:
- 'main'
push:
branches:
- gh-readonly-queue/main/**
permissions:
contents: read
jobs:
lint:
name: Validate
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Harden Runner
uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
with:
egress-policy: audit
- uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
with:
fetch-depth: 0
path: './wolfi-advisories'
- name: 'Clone Wolfi packages repository'
uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
with:
repository: 'wolfi-dev/os'
fetch-depth: 0
path: './wolfi-packages'
ref: 'main'
- name: get fork point
id: fork-point
working-directory: ./wolfi-advisories
run: |
fork_point=$(git merge-base --fork-point refs/remotes/origin/${{ github.base_ref }} HEAD || git rev-parse HEAD)
echo "fork point will be $fork_point"
echo "fork_point=$fork_point" >> $GITHUB_OUTPUT
# this need to point to main to always get the latest action
- uses: wolfi-dev/actions/advisories-validate@main # main
with:
fork_point: ${{ steps.fork-point.outputs.fork_point }}
advisories-directory: './wolfi-advisories'
packages-directory: './wolfi-packages'
repository: ${{ github.repository }}
package-repo-url: 'https://packages.wolfi.dev/os'
token: ${{ secrets.GITHUB_TOKEN }}