Files
OpenSTA/.github/workflows/github-actions-are-differences-found.yml
T
Vitor Bandeira 38442a61a7 gha: use commit sha instead of version/tag
Using commit sha helps prevent chain attacks that have become common.

Signed-off-by: Vitor Bandeira <[email protected]>
2026-05-27 14:34:50 -03:00

21 lines
539 B
YAML

name: Check that OK files are up to date
on:
pull_request:
jobs:
No-Diffs-In-Ok-Files:
runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && 'self-hosted' || 'ubuntu-latest' }}
steps:
- name: Check out repository code
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
fetch-depth: 0
- name: Check ok files
run: |
set +e
grep --include="*.ok" -Rn "Differences found "
if [[ "$?" == "0" ]]; then
exit 1
fi