Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

workflows/tests: fix template-injection zizmor info #201306

Merged
merged 1 commit into from
Dec 16, 2024

Conversation

samford
Copy link
Member

@samford samford commented Dec 16, 2024

  • Have you followed the guidelines for contributing?
  • Have you ensured that your commits follow the commit style guide?
  • Have you checked that there aren't other open pull requests for the same formula update/change?
  • Have you built your formula locally with HOMEBREW_NO_INSTALL_FROM_API=1 brew install --build-from-source <formula>, where <formula> is the name of the formula you're submitting?
  • Is your test running fine brew test <formula>, where <formula> is the name of the formula you're submitting?
  • Does your build pass brew audit --strict <formula> (after doing HOMEBREW_NO_INSTALL_FROM_API=1 brew install --build-from-source <formula>)? If this is a new formula, does it pass brew audit --new <formula>?

This updates workflows/tests.yml to use environment variables to address template-injection info from zizmor.

@samford samford requested review from MikeMcQuaid and a team as code owners December 16, 2024 00:40
@github-actions github-actions bot added automerge-skip `brew pr-automerge` will skip this pull request workflows PR modifies GitHub Actions workflow files labels Dec 16, 2024
.github/workflows/tests.yml Outdated Show resolved Hide resolved
This updates `workflows/tests.yml` to use environment variables to
address `template-injection` info from `zizmor`.
@samford samford force-pushed the zizmor-tests-template-injection branch from 04036fe to a97fcdc Compare December 16, 2024 01:19
@woodruffw woodruffw added this pull request to the merge queue Dec 16, 2024
Merged via the queue into master with commit 656b27e Dec 16, 2024
22 checks passed
@woodruffw woodruffw deleted the zizmor-tests-template-injection branch December 16, 2024 02:46
@daeho-ro
Copy link
Member

Now our CI cannot recognize formula name, maybe should roll-back?

ZhongRuoyu added a commit that referenced this pull request Dec 16, 2024
The double quoting of formula names is broken after #201306. Let's fix
it by moving out the double-quoted formula names to a separate variable.
Should fix the failure seen in [1].

[1]: https://github.com/Homebrew/homebrew-core/actions/runs/12345589565/job/34449970508?pr=201322
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
automerge-skip `brew pr-automerge` will skip this pull request workflows PR modifies GitHub Actions workflow files
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants