blob: bdadab6505f09db6a6a1105642f05a5c96c639fd (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
name: repository
on:
pull_request_target:
types: [opened, reopened, synchronize, labeled, unlabeled]
jobs:
check:
name: Protection checks
# 22.04's podman has issues with piping and causes tar errors
runs-on: ubuntu-20.04
permissions:
contents: read
pull-requests: write
timeout-minutes: 5
env:
HEAD_SHA: ${{ github.event.pull_request.head.sha }}
BASE_SHA: ${{ github.event.pull_request.base.sha }}
steps:
- name: Clone target branch
uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Fetch PR commits
run: git fetch origin "${BASE_SHA}" "${HEAD_SHA}"
- name: Clear .github-changes label
if: ${{ !endsWith(github.event.action, 'labeled') }}
uses: actions/github-script@v7
with:
script: |
try {
await github.rest.issues.removeLabel({
owner: context.repo.owner,
repo: context.repo.repo,
issue_number: context.issue.number,
name: '.github-changes'
});
} catch (e) {
if (e.name == 'HttpError' && e.status == 404) {
/* expected: 404 if label is unset */
} else {
throw e;
}
}
- name: Check for .github changes
# We want to run this check any time the .github-changes label is not
# set, which needs to include the case where we just unset it above.
if: ${{ !endsWith(github.event.action, 'labeled') ||
!contains(github.event.pull_request.labels.*.name, '.github-changes') }}
run: |
set -x
git log --full-history --exit-code --patch "${HEAD_SHA}" --not "${BASE_SHA}" -- .github >&2
- name: Check for node_modules availability and package.json consistency
run: |
# Make tools/node-modules available
make tools/node-modules
# for each commit in the PR which modifies package.json or node_modules...
for commit in $(git log --reverse --full-history --format=%H \
"${HEAD_SHA}" --not "${BASE_SHA}" -- package.json node_modules); do
# ... check that package.json and node_modules/.package.json are in sync
tools/node-modules verify "${commit}"
done
|
