Skip to content

Commit f3490d7

Browse files
committed
Update qcom-preflight-checks.yml
pull_request_target can be a security vulnerability and should be avoided and also aligned with latest pre-flight check workflow. Signed-off-by: Sandhya Adavikolanu <sadaviko@qti.qualcomm.com>
1 parent 3db4525 commit f3490d7

File tree

1 file changed

+11
-11
lines changed

1 file changed

+11
-11
lines changed
Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
name: Qualcomm Preflight Checks
22
on:
3-
pull_request_target:
3+
pull_request:
44
branches: [ camera-kernel.qclinux.0.0 ]
55
push:
66
branches: [ camera-kernel.qclinux.0.0 ]
@@ -11,14 +11,14 @@ permissions:
1111
security-events: write
1212

1313
jobs:
14-
qcom-preflight-checks:
15-
uses: qualcomm/qcom-reusable-workflows/.github/workflows/qcom-preflight-checks-reusable-workflow.yml@v1.1.4
14+
preflight:
15+
name: Run QC Preflight Checks
16+
uses: qualcomm/qcom-reusable-workflows/.github/workflows/reusable-qcom-preflight-checks-orchestrator.yml@v2
1617
with:
17-
# ✅ Preflight Checkers
18-
repolinter: false # default: false
19-
semgrep: false # default: false
20-
copyright-license-detector: true # default: true
21-
pr-check-emails: true # default: true
22-
dependency-review: true # default: true
23-
secrets:
24-
SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
18+
enable-semgrep-scan: true
19+
enable-dependency-review: true
20+
enable-repolinter-check: true
21+
enable-copyright-license-check: true
22+
enable-commit-email-check: true
23+
enable-commit-msg-check: false
24+
enable-armor-checkers: false

0 commit comments

Comments
 (0)