action #138542
opencoordination #96596: [qe-core][CI] CI/CD and Coding style improvements
[qe-core] Automate checks to avoid security concerns
0%
Description
tl;dr: In order for us to enable #138539 for all of the teams, or to be able to suggest them to use this, we need the following action points from os-autoinst/os-autoinst-distri-opensuse#13455 to be addressed:
- Until we have an automated check that the pr is not adding compressed files
- Until we have an automated check that there are no external things being loade
Updated by okurz 6 months ago
do we also need those checks to let mergify state a simple check result? The last state of https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/13455 would not automatically merge anyway, see https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/13455#issuecomment-1477428837.
szarate wrote:
tl;dr: In order for us to enable #138539 for all of the teams, or to be able to suggest them to use this, we need the following action points from os-autoinst/os-autoinst-distri-opensuse#13455 to be addressed:
- Until we have an automated check that the pr is not adding compressed files
- Until we have an automated check that there are no external things being loade
I already asked back on those questions in https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/13455#issuecomment-992537335 and never got a reply.