Skip to content

Commit 2c0b8d8

Browse files
authored
chore: disable unauthorized file change check due to known vulnerabilities (#1622)
1 parent b0c67bd commit 2c0b8d8

File tree

1 file changed

+48
-46
lines changed

1 file changed

+48
-46
lines changed

.github/workflows/ci.yml

Lines changed: 48 additions & 46 deletions
Original file line numberDiff line numberDiff line change
@@ -70,51 +70,53 @@ jobs:
7070
name: ${{ env.CODECOV_UNIQUE_NAME }}
7171
verbose: true
7272
fail_ci_if_error: true
73-
74-
check-unauthorized-file-changes:
75-
name: Check Unauthorized File Changes
76-
if: ${{github.actor != 'dependabot[bot]'}} && ${{github.event_name == 'pull_request'}}
77-
runs-on: ubuntu-latest
78-
steps:
79-
- name: Checkout code
80-
uses: actions/checkout@v4
73+
74+
# Turning off the check for unauthorized files changes due to some vulnerabilities in the action
75+
76+
# check-unauthorized-file-changes:
77+
# name: Check Unauthorized File Changes
78+
# if: ${{github.actor != 'dependabot[bot]'}} && ${{github.event_name == 'pull_request'}}
79+
# runs-on: ubuntu-latest
80+
# steps:
81+
# - name: Checkout code
82+
# uses: actions/checkout@v4
8183

82-
- name: Get Changed Unauthorized files
83-
id: changed-unauth-files
84-
uses: tj-actions/changed-files@v46
85-
with:
86-
files: |
87-
.github/**
88-
.husky/**
89-
.env.example
90-
package.json
91-
tsconfig.json
92-
next.config.js
93-
next-sitemap.config.js
94-
next-env.d.ts
95-
tailwind.config.js
96-
postcss.config.js
97-
yarn.lock
98-
Dockerfile
99-
CODEOWNERS
100-
LICENSE
101-
.gitignore
102-
.gitmodules
103-
.gitattributes
104-
.eslintrc.js
105-
.eslintignore
106-
.zshrc
107-
.prettierrc
108-
.prettierignore
109-
.dockerignore
110-
makefile
84+
# - name: Get Changed Unauthorized files
85+
# id: changed-unauth-files
86+
# uses: tj-actions/changed-files@v46
87+
# with:
88+
# files: |
89+
# .github/**
90+
# .husky/**
91+
# .env.example
92+
# package.json
93+
# tsconfig.json
94+
# next.config.js
95+
# next-sitemap.config.js
96+
# next-env.d.ts
97+
# tailwind.config.js
98+
# postcss.config.js
99+
# yarn.lock
100+
# Dockerfile
101+
# CODEOWNERS
102+
# LICENSE
103+
# .gitignore
104+
# .gitmodules
105+
# .gitattributes
106+
# .eslintrc.js
107+
# .eslintignore
108+
# .zshrc
109+
# .prettierrc
110+
# .prettierignore
111+
# .dockerignore
112+
# makefile
111113

112-
- name: List all changed unauthorized files
113-
if: steps.changed-unauth-files.outputs.any_changed == 'true' || steps.changed-unauth-files.outputs.any_deleted == 'true'
114-
env:
115-
CHANGED_UNAUTH_FILES: ${{ steps.changed-unauth-files.outputs.all_changed_files }}
116-
run: |
117-
for file in ${CHANGED_UNAUTH_FILES}; do
118-
echo "$file is unauthorized to change/delete"
119-
done
120-
exit 1
114+
# - name: List all changed unauthorized files
115+
# if: steps.changed-unauth-files.outputs.any_changed == 'true' || steps.changed-unauth-files.outputs.any_deleted == 'true'
116+
# env:
117+
# CHANGED_UNAUTH_FILES: ${{ steps.changed-unauth-files.outputs.all_changed_files }}
118+
# run: |
119+
# for file in ${CHANGED_UNAUTH_FILES}; do
120+
# echo "$file is unauthorized to change/delete"
121+
# done
122+
# exit 1

0 commit comments

Comments
 (0)