From aee25c4cf3cb33673bdd0cb24cf7f8a35a35deee Mon Sep 17 00:00:00 2001 From: bo0tzz Date: Sat, 15 Mar 2025 11:25:31 +0100 Subject: [PATCH] fix: remove compromised tj-actions/changed-files action Signed-off-by: bo0tzz --- .github/workflows/docker.yml | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index 373a7f0..c74d3de 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -67,9 +67,17 @@ jobs: - name: Determine version change id: changed-version - uses: tj-actions/changed-files@v45 - with: - files: versions.yaml + run: | + CHANGED_FILES=$(git diff --name-only origin/$GITHUB_BASE_REF...HEAD) + echo $CHANGED_FILES + # Looking for: + # versions.yaml + # Dockerfile + if echo "$CHANGED_FILES" | grep -q -e "^versions.yaml$" -e "^Dockerfile$"; then + echo "any_changed=true" >> $GITHUB_OUTPUT + else + echo "any_changed=false" >> $GITHUB_OUTPUT + fi - name: Determine image push uses: actions/github-script@v7