Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feed pr base sha and ref into envs before scripts #2168

Merged
merged 2 commits into from
Oct 30, 2024
Merged

Conversation

rtpascual
Copy link
Contributor

@rtpascual rtpascual commented Oct 30, 2024

Changes

Passing potentially untrusted inputs to intermediate environment variables before passing to commands as suggested in https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable.

Corresponding docs PR, if applicable:

Validation

Health checks on this PR.

Checklist

  • If this PR includes a functional change to the runtime behavior of the code, I have added or updated automated test coverage for this change.
  • If this PR requires a change to the Project Architecture README, I have included that update in this PR.
  • If this PR requires a docs update, I have linked to that docs PR above.
  • If this PR modifies E2E tests, makes changes to resource provisioning, or makes SDK calls, I have run the PR checks with the run-e2e label set.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Copy link

changeset-bot bot commented Oct 30, 2024

🦋 Changeset detected

Latest commit: f4a4680

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 0 packages

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@rtpascual rtpascual marked this pull request as ready for review October 30, 2024 18:31
@rtpascual rtpascual requested review from a team as code owners October 30, 2024 18:31
ShadowCat567
ShadowCat567 previously approved these changes Oct 30, 2024
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this file is empty. is this intentional ?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Whoops, that was accidentally added. Removing it.

Comment on lines +433 to +434
env:
BASE_SHA: ${{ github.event.pull_request.base.sha }}
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the change is fine but for this particular field it seems overkill.
I.e. this particular filed on the event is not containing user data.

@rtpascual rtpascual merged commit fbdba22 into main Oct 30, 2024
40 checks passed
@rtpascual rtpascual deleted the update-workflows branch October 30, 2024 20:26
sobolk pushed a commit that referenced this pull request Nov 4, 2024
* feed pr base sha and ref into envs before scripts

* removing empty file
sobolk pushed a commit that referenced this pull request Nov 4, 2024
* feed pr base sha and ref into envs before scripts

* removing empty file
sobolk pushed a commit that referenced this pull request Nov 7, 2024
* feed pr base sha and ref into envs before scripts

* removing empty file
sobolk pushed a commit that referenced this pull request Nov 7, 2024
* feed pr base sha and ref into envs before scripts

* removing empty file
awsluja added a commit that referenced this pull request Nov 7, 2024
* chore: add working setup for e2e resources in ref auth

* feed pr base sha and ref into envs before scripts (#2168)

* feed pr base sha and ref into envs before scripts

* removing empty file

* chore: update names to use test prefix

* chore: remove extra hyphen

* chore: fix cleanup and add sandbox test

* chore: make sure to throw if error describing stack is unknown

---------

Co-authored-by: Roshane Pascual <[email protected]>
awsluja added a commit that referenced this pull request Nov 11, 2024
* feat: reference auth basic setup

* chore: factory basic tests

* chore: update api

* chore: add ref auth package as dependency to backend-auth

* chore: lint

* chore: add tests for construct

* chore: cleanup tsconfig

* chore: add changeset

* chore: fix tests inputs

* chore: update tests

* fix: update resource provider types

* chore: update api

* feat: reference auth outputs

* chore: add tests

* chore: fix test

* chore: cleanup reused variables

* chore: changeset

* chore: cleanup changeset

* chore: cleanup

* chore: cleanup changesets, lockfile, and api

* chore: fix mismatched output structure

* chore: refactor and add tests

* chore: add more tests for identity pool errors

* chore: cleanup

* chore: fix test

* chore: add role tests

* chore: add tests for user pool client

* chore: cleanup

* chore: refactor

* chore: fix api

* chore: undo changes to concurrent workspace script

* chore: add missing roles permission

* chore: update expected IAM policy permissions for identity pool

* fix: make sure to throw on errors when using Provider framework

* chore: refactor

* chore: cleanup

* chore: more cleanup

* chore: check for alias attributes and fix tests

* chore: add support for validating group roles exist for user pool

* chore: update package-lock file

* chore: add checks for oauth validation

* chore: fix typo

* chore: eliminate forcing updates on any change

* chore: remove commented out code

* chore: merge factory count into single count for all auth factories

* chore: move sample data and npmignore it

* chore: cleanup

* chore: fix path

* chore: update package lock

* chore: update package-lock

* chore: move construct into backend-auth

* chore: update api

* chore: update changeset

* chore: cleanup

* chore: move props type to factory

* chore: add working setup for e2e resources in ref auth (#2122)

* chore: add working setup for e2e resources in ref auth

* feed pr base sha and ref into envs before scripts (#2168)

* feed pr base sha and ref into envs before scripts

* removing empty file

* chore: update names to use test prefix

* chore: remove extra hyphen

* chore: fix cleanup and add sandbox test

* chore: make sure to throw if error describing stack is unknown

---------

Co-authored-by: Roshane Pascual <[email protected]>

* chore: add bsd-3-clause-clear license to allow list

* chore: cleanup

* chore: make lambda deps dev dependencies

* chore: revert license changes

* chore: remove tag mechanism as not needed for cleanup

---------

Co-authored-by: Roshane Pascual <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants