From 506763ad172e371c5e828af5a31a136413c82a07 Mon Sep 17 00:00:00 2001 From: Jose Diaz-Gonzalez Date: Sat, 15 Mar 2025 05:49:57 -0400 Subject: [PATCH] security: drop tj-actions/changed-files I've manually audited our usage and it doesn't look like credentials were printed anywhere, but before they do for another PR, just remove the usage. If this ends up failing CI, thats also fine, I'll just remove packer validation and manually run it if that file changes. --- .github/workflows/lint.yml | 6 ------ 1 file changed, 6 deletions(-) diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index a8deebdd5..72fa04782 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -56,15 +56,9 @@ jobs: run: "make image/init/digitalocean" env: PACKER_GITHUB_API_TOKEN: ${{ secrets.GITHUB_TOKEN }} - - name: Get changed files in the docs folder - id: changed-files-specific - uses: tj-actions/changed-files@v45.0.8 - with: - files: contrib/images/digitalocean/** - name: Run `packer validate` env: DIGITALOCEAN_TOKEN: ${{ secrets.DIGITALOCEAN_TOKEN }} - if: steps.changed-files-specific.outputs.any_changed == 'true' run: "make image/validate/digitalocean" shellcheck: