gsadmin/rustfs
1
0
Fork 0
mirror of https://github.com/rustfs/rustfs.git synced 2026-08-30 16:59:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

Potential fix for code scanning alert no. 13: Code injection (#447)

Browse Source 
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: 安正超 <anzhengchao@gmail.com>
This commit is contained in:
houseme
2025-08-23 10:05:00 +08:00
committed by GitHub
parent 8857f31b07
commit bdcba3460e
1 changed files with 14 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/docker.yml
+14 -10
View File
@@ -58,6 +58,10 @@ on:
type: boolean type: boolean
env: env:
CONCLUSION: ${{ github.event.workflow_run.conclusion }}
HEAD_BRANCH: ${{ github.event.workflow_run.head_branch }}
HEAD_SHA: ${{ github.event.workflow_run.head_sha }}
TRIGGERING_EVENT: ${{ github.event.workflow_run.event }}
DOCKERHUB_USERNAME: rustfs DOCKERHUB_USERNAME: rustfs
CARGO_TERM_COLOR: always CARGO_TERM_COLOR: always
REGISTRY_DOCKERHUB: rustfs/rustfs REGISTRY_DOCKERHUB: rustfs/rustfs
@@ -102,27 +106,27 @@ jobs:
# Check if the triggering workflow was successful # Check if the triggering workflow was successful
# If the workflow succeeded, it means ALL builds (including Linux x86_64 and aarch64) succeeded # If the workflow succeeded, it means ALL builds (including Linux x86_64 and aarch64) succeeded
if [[ "${{ github.event.workflow_run.conclusion }}" == "success" ]]; then if [[ "$CONCLUSION" == "success" ]]; then
echo "✅ Build workflow succeeded, all builds including Linux are successful" echo "✅ Build workflow succeeded, all builds including Linux are successful"
should_build=true should_build=true
should_push=true should_push=true
else else
echo "❌ Build workflow failed (conclusion: ${{ github.event.workflow_run.conclusion }}), skipping Docker build" echo "❌ Build workflow failed (conclusion: $CONCLUSION), skipping Docker build"
should_build=false should_build=false
fi fi
# Extract version info from commit message or use commit SHA # Extract version info from commit message or use commit SHA
# Use Git to generate consistent short SHA (ensures uniqueness like build.yml) # Use Git to generate consistent short SHA (ensures uniqueness like build.yml)
short_sha=$(git rev-parse --short "${{ github.event.workflow_run.head_sha }}") short_sha=$(git rev-parse --short "$HEAD_SHA")
# Determine build type based on triggering workflow event and ref # Determine build type based on triggering workflow event and ref
triggering_event="${{ github.event.workflow_run.event }}" triggering_event="$TRIGGERING_EVENT"
head_branch="${{ github.event.workflow_run.head_branch }}" head_branch="$HEAD_BRANCH"
echo "🔍 Analyzing triggering workflow:" echo "🔍 Analyzing triggering workflow:"
echo " 📋 Event: $triggering_event" echo " 📋 Event: $triggering_event"
echo " 🌿 Head branch: $head_branch" echo " 🌿 Head branch: $head_branch"
echo " 📎 Head SHA: ${{ github.event.workflow_run.head_sha }}" echo " 📎 Head SHA: $HEAD_SHA"
# Check if this was triggered by a tag push # Check if this was triggered by a tag push
if [[ "$triggering_event" == "push" ]]; then if [[ "$triggering_event" == "push" ]]; then
@@ -174,10 +178,10 @@ jobs:
fi fi
echo "🔄 Build triggered by workflow_run:" echo "🔄 Build triggered by workflow_run:"
echo " 📋 Conclusion: ${{ github.event.workflow_run.conclusion }}" echo " 📋 Conclusion: $CONCLUSION"
echo " 🌿 Branch: ${{ github.event.workflow_run.head_branch }}" echo " 🌿 Branch: $HEAD_BRANCH"
echo " 📎 SHA: ${{ github.event.workflow_run.head_sha }}" echo " 📎 SHA: $HEAD_SHA"
echo " 🎯 Event: ${{ github.event.workflow_run.event }}" echo " 🎯 Event: $TRIGGERING_EVENT"
elif [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then elif [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
# Manual trigger # Manual trigger