diff options
| author | Yuriy Andamasov <yuriy@vyos.io> | 2026-05-11 01:02:47 +0300 |
|---|---|---|
| committer | Yuriy Andamasov <yuriy@vyos.io> | 2026-05-11 01:02:47 +0300 |
| commit | ac0b1e8d8ea866c0314d693443bf29b76f093822 (patch) | |
| tree | 04fbaed99011b52626bcbc8ed02659f00b0aed76 /docs/_static/css/headers.css | |
| parent | 1354267a5bf571fb61d8ddbeee1992fb0f430790 (diff) | |
| download | vyos-documentation-ac0b1e8d8ea866c0314d693443bf29b76f093822.tar.gz vyos-documentation-ac0b1e8d8ea866c0314d693443bf29b76f093822.zip | |
ci: validate workflow_dispatch variant input against allowlist
Copilot review on #1962 flagged that the type:choice UI constraint on
workflow_dispatch.inputs.variant is bypassable when invoked via API
(gh workflow run -f variant=…). An empty or arbitrary value would:
- Generate a malformed concurrency key (context7-refresh- with empty
suffix, since inputs.variant || head_branch || '' both go falsy)
- Pass garbage to Context7's API (404s gracefully, but still a wasted
runner minute and noisy)
Add an explicit allowlist case after VARIANT is computed. Fails loud
with a clear message before any downstream call.
🤖 Generated by [robots](https://vyos.io)
Diffstat (limited to 'docs/_static/css/headers.css')
0 files changed, 0 insertions, 0 deletions