Skip to content

Commit 00a53b9

Browse files
committed
Remove changed-files GH action due to sec vulnerability
Raed more here https://semgrep.dev/blog/2025/popular-github-action-tj-actionschanged-files-is-compromised/ Signed-off-by: Paolo Di Tommaso <[email protected]>
1 parent bf18ee8 commit 00a53b9

File tree

1 file changed

+1
-21
lines changed

1 file changed

+1
-21
lines changed

.github/workflows/build.yml

Lines changed: 1 addition & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -52,22 +52,7 @@ jobs:
5252
echo "commit_message=$COMMIT_MESSAGE" | head -n 1 >> $GITHUB_OUTPUT
5353
fi
5454
55-
- name: Get changed files
56-
id: changed-files
57-
uses: tj-actions/changed-files@v43
58-
with:
59-
files_ignore: docs/**
60-
61-
- name: List all changed files
62-
env:
63-
ALL_CHANGED_FILES: ${{ steps.changed-files.outputs.all_changed_files }}
64-
run: |
65-
for file in ${ALL_CHANGED_FILES}; do
66-
echo "$file was changed"
67-
done
68-
6955
- name: Setup env
70-
if: steps.changed-files.outputs.any_changed == 'true'
7156
run: |
7257
rm -f $HOME/.gitconfig;
7358
mkdir -p "$HOME/.nextflow";
@@ -76,7 +61,6 @@ jobs:
7661
NXF_GITHUB_ACCESS_TOKEN: ${{ secrets.NXF_GITHUB_ACCESS_TOKEN }}
7762

7863
- name: Setup Java ${{ matrix.java_version }}
79-
if: steps.changed-files.outputs.any_changed == 'true'
8064
uses: actions/setup-java@v4
8165
with:
8266
java-version: ${{matrix.java_version}}
@@ -85,11 +69,9 @@ jobs:
8569
cache: gradle
8670

8771
- name: Compile
88-
if: steps.changed-files.outputs.any_changed == 'true'
8972
run: make assemble
9073

9174
- name: Test
92-
if: steps.changed-files.outputs.any_changed == 'true'
9375
run: |
9476
env | sort
9577
# configure test env
@@ -114,18 +96,16 @@ jobs:
11496

11597
- name: Publish tests report
11698
uses: actions/upload-artifact@v4
117-
if: steps.changed-files.outputs.any_changed == 'true' && always()
11899
with:
119100
name: report-unit-tests-jdk-${{ matrix.java_version }}
120101
path: |
121102
**/build/reports/tests/test
122103
123104
outputs:
124-
any_changed: ${{ steps.changed-files.outputs.any_changed }}
125105
commit_message: ${{ steps.get_commit_message.outputs.commit_message }}
126106

127107
test:
128-
if: ${{ !contains(needs.build.outputs.commit_message, '[ci fast]') && needs.build.outputs.any_changed == 'true' }}
108+
if: ${{ !contains(needs.build.outputs.commit_message, '[ci fast]') }}
129109
needs: build
130110
runs-on: ubuntu-latest
131111
timeout-minutes: 90

0 commit comments

Comments
 (0)