From d6235cfc7dfd94fe91757dd747a69497c620987b Mon Sep 17 00:00:00 2001 From: Vince Grassia <593223+vgrassia@users.noreply.github.com> Date: Wed, 2 Oct 2024 11:03:52 -0400 Subject: [PATCH] Allow any Bitwarden repository to have actions pinned to non-hash values (#330) --- lint-workflow/lint.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lint-workflow/lint.py b/lint-workflow/lint.py index 1f793b43..8523380f 100644 --- a/lint-workflow/lint.py +++ b/lint-workflow/lint.py @@ -301,7 +301,7 @@ def lint(filename): break # If the step has a 'uses' key, check if actions are in supported actions list and also value hash, except bitwarden actions. - if "bitwarden/gh-actions" not in path: + if "bitwarden/" not in path: try: # Check if actions are in supported actions list. if path not in supported_actions: @@ -342,7 +342,7 @@ def lint(filename): # If the step has a 'uses' key, check path for external workflow path_list = path.split("/", 2) - if "bitwarden/gh-actions" in path and len(path_list) < 3: + if "bitwarden/" in path and len(path_list) < 3: findings.append( LintFinding( f"Step {str(i)} of job key '{job_key}' does not have a valid action path. (missing name of the repository or workflow)",