blob: f6096b0fd74d48bec034c5c048ca3115b549a7c7 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
|
name: validate
on:
pull_request:
push:
branches: [production]
workflow_dispatch:
jobs:
validate:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Audit egress
continue-on-error: true
uses: bullfrogsec/bullfrog@7bc9b6e13e2dd9cbe5861f33bc26dc6bdb9d9ed2 # v0.10.0
with:
egress-policy: audit
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with:
persist-credentials: false
- name: Validate codecov.yml structure
run: |
set -euo pipefail
response=$(curl -sS --fail-with-body -X POST \
--connect-timeout 10 --max-time 60 \
--data-binary @codecov.yml \
https://codecov.io/validate)
echo "$response"
|
