From 2cd05ea8133cb3b115e8d80fe1f38facb8bd2006 Mon Sep 17 00:00:00 2001 From: arbulu89 Date: Wed, 4 May 2022 10:01:55 +0200 Subject: [PATCH] Use get-latest action to avoid issues with git after CVE-2022-24765 --- .github/workflows/ci.yaml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index e1d0509bed..64e8e818e0 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -314,8 +314,12 @@ jobs: - name: Checkout uses: actions/checkout@v3 + + - uses: actions-ecosystem/action-get-latest-tag@v1 + id: latest-tag with: - fetch-depth: 0 + semver_only: true + initial_version: 0.0.1 - name: Setup Node uses: actions/setup-node@v3 @@ -330,7 +334,7 @@ jobs: - name: Set version run: | - VERSION=$(./hack/get_version_from_git.sh) + VERSION=${{ steps.latest-tag.outputs.tag }} sed -i 's~%%VERSION%%~'"${VERSION}"'~' packaging/suse/Dockerfile - name: Configure OSC