Skip to content

Commit

Permalink
Merge branch 'master' into integrate-with-frontend-web-app
Browse files Browse the repository at this point in the history
  • Loading branch information
JonathanLeeWH committed Oct 27, 2021
2 parents 5c5065c + 18fbd97 commit dfead43
Show file tree
Hide file tree
Showing 6 changed files with 654 additions and 854 deletions.
4 changes: 2 additions & 2 deletions .github/workflows/app-test-container-no-docker-cache.yml
Original file line number Diff line number Diff line change
Expand Up @@ -31,11 +31,11 @@ jobs:
steps:
- name: checkout
if: ${{ github.event_name != 'pull_request_target' }}
uses: actions/checkout@v2.3.4
uses: actions/checkout@v2.3.5

- name: checkout Pull Request (dependabot[bot] only)
if: ${{ github.event_name == 'pull_request_target' }}
uses: actions/checkout@v2.3.4
uses: actions/checkout@v2.3.5
with:
# Without ref with pull_request_target, it does not actually build the PR, instead it builds the latest changeset from the target repository which is not the intended behaviour. (Reference: https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ [Last example])
ref: ${{ github.event.pull_request.head.sha }}
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/app-test-container.yml
Original file line number Diff line number Diff line change
Expand Up @@ -31,11 +31,11 @@ jobs:
steps:
- name: checkout
if: ${{ github.event_name != 'pull_request_target' }}
uses: actions/checkout@v2.3.4
uses: actions/checkout@v2.3.5

- name: checkout Pull Request (dependabot[bot] only)
if: ${{ github.event_name == 'pull_request_target' }}
uses: actions/checkout@v2.3.4
uses: actions/checkout@v2.3.5
with:
# Without ref with pull_request_target, it does not actually build the PR, instead it builds the latest changeset from the target repository which is not the intended behaviour. (Reference: https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ [Last example])
ref: ${{ github.event.pull_request.head.sha }}
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/node.js-with-docker-db.yml
Original file line number Diff line number Diff line change
Expand Up @@ -38,11 +38,11 @@ jobs:
steps:
- name: checkout
if: ${{ github.event_name != 'pull_request_target' }}
uses: actions/checkout@v2.3.4
uses: actions/checkout@v2.3.5

- name: checkout Pull Request (dependabot[bot] only)
if: ${{ github.event_name == 'pull_request_target' }}
uses: actions/checkout@v2.3.4
uses: actions/checkout@v2.3.5
with:
# Without ref with pull_request_target, it does not actually build the PR, instead it builds the latest changeset from the target repository which is not the intended behaviour. (Reference: https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ [Last example])
ref: ${{ github.event.pull_request.head.sha }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/node.js.yml
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ jobs:
node-version: [14.x]

steps:
- uses: actions/checkout@v2.3.4
- uses: actions/checkout@v2.3.5
- name: Use Node.js ${{ matrix.node-version }}
uses: actions/setup-node@v2.4.1
with:
Expand Down
Loading

0 comments on commit dfead43

Please sign in to comment.