-
Notifications
You must be signed in to change notification settings - Fork 14.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix(ci): correct input type for allow-dependencies-licenses
in Dependency Review GH action
#28343
Conversation
…endency Review GH action Signed-off-by: hainenber <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Oooops my bad, thanks for fixing it!
#28343 fixes an issue where I had broken a specific github action workflow in a previous PR without realizing I did. If/when altering the yaml, if the yaml itsefl is valid (we have a check for that) yet the schema is not - either through passing the right data structure or required types, the action just won't run and the PR is still mergeable. The failure gets somewhat burried on the Actions tab (at the bottom of https://github.com/apache/superset/actions) Here I'm hoping that this pre-commit hook will both catch this early, and prevent the PR from being mergeable. Find out more about the hook here: https://github.com/mpalmer/action-validator
Hoping #28358 will prevent similar troubles |
# license: https://applitools.com/legal/open-source-terms-of-use/ | ||
# pkg:npm/[email protected] | ||
# selecting BSD-3-Clause licensing terms for node-forge to ensure compatibility with Apache | ||
allow-dependencies-licenses: pkg:npm/[email protected], pkg:npm/applitools/core, pkg:npm/applitools/core-base, pkg:npm/applitools/css-tree, pkg:npm/applitools/ec-client, pkg:npm/applitools/eg-socks5-proxy-server, pkg:npm/applitools/eyes, pkg:npm/applitools/eyes-cypress, pkg:npm/applitools/nml-client, pkg:npm/applitools/tunnel-client, pkg:npm/applitools/utils, pkg:npm/[email protected] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Any reason to switch from multiline to single line? This seems less readable and harder to review future changes if only one dependency changes.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The GH action only accepts the input arg as single line. Maybe it will get fixed in the future version but for now, it's the only way proceeding
…ndency Review GH action (apache#28343) Signed-off-by: hainenber <[email protected]>
…ndency Review GH action (apache#28343) Signed-off-by: hainenber <[email protected]>
…ndency Review GH action (apache#28343) Signed-off-by: hainenber <[email protected]>
…ndency Review GH action (apache#28343) Signed-off-by: hainenber <[email protected]>
fix(ci): correct input type for
allow-dependencies-licenses
for Dependency Review GH actionSUMMARY
Some of my PRs got failed in the GH action due to incorrect input type for said GH action. This change is to restore the CI job's functionality.
BEFORE/AFTER SCREENSHOTS OR ANIMATED GIF
Before
![image](https://private-user-images.githubusercontent.com/41283691/327959359-97beca33-87f6-4ef4-a764-f57de15220b6.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.ppSmjb3tobLtrqbu_LmkzJg3-vImiA9CGNdikns21-c)
After
![image](https://private-user-images.githubusercontent.com/41283691/327959446-bd5288b6-b60e-458a-8344-264729c85f2e.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.rvuSfN6AkQIpNqIWlUio0KQtl8glFqIvVvVjhdWLo8g)
TESTING INSTRUCTIONS
ADDITIONAL INFORMATION