Skip to content

Adding a temporary fix to stop non-maintainers from RCE #395

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 4 commits into from
Closed

Adding a temporary fix to stop non-maintainers from RCE #395

Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
ed39b0f
Adding a temporary fix to stop non-maintainers from RCE
unlox775 Oct 26, 2023
598dc18
include actor pattern in main filtergroup
cat5inthecradle Oct 26, 2023
974324b
Switching to ID-based
unlox775 Oct 26, 2023
3959894
Update cicd.template.yml
unlox775 Oct 26, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion cicd/2-cicd/cicd.template.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -149,7 +149,10 @@ Resources:
Type: BASE_REF
- Pattern: PULL_REQUEST_CREATED,PULL_REQUEST_UPDATED,PULL_REQUEST_REOPENED
Type: EVENT

# Manual PAUSE button, to disable non-GitHib-maintainers from triggering (we need to find a replacement for CodeBuild for this repo's CI, or make it not public)
- - Pattern: ^(AfifahK|allison-code-dot-org|amy-b|angD13|annaxuphoto|artem-vavilov|bakerfranke|bdmesh|bencodeorg|bethanyaconnor|breville|carl-codeorg|cat5inthecradle|cearachew|code-org|dancodedotorg|davidsbailey|daynew|deploy-cod-org|dju90|dmantonyuk|dmcavoy|ebeastlake|Erin007|etaderhold|fisher-alice|hadipartovi|Hamms|hannahbergam|jamjamgobambam|jmkulwik|jordan-springer|juanmanzojr|kakiha11|katiejofr|kelbyhawn|kobryan0619|levadadenys|lfryemason|maribethb|markabarrett|mcatullo|mgc1194|mikeharv|molly-moen|moneppo|nataliazm99|nicklathe|Nokondi|onlinecsteacher|pablo-code-org|rshipp|samantha-code|sanchitmalhotra126|simonguest|snickell|sureshc|tess323|thomasoniii|tjcodeorg|tshaffercodeorg|TurnerRiley|unlox775-code-dot-org|vijayamanohararaj|wilkie)$
Type: ACTOR_ACCOUNT_ID

# The CodeBuild Project is used in the CodePipeline pipeline to prepare for a release.
# It will perform any steps defined in the referenced buildspec.yml file.
LoadTestBuildProject:
Expand Down