Skip to content

feat: Added sensitive files check to CI pipeline #327

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

shivasankaran18
Copy link

Closes #311

Changes

  • Implemented a GitHub Actions workflow to detect unauthorized modifications to sensitive files.
  • Used tj-actions/changed-files@v45 to retrieve changed files in a pull request.
  • Added a Bash script that checks if any restricted files (e.g., .github/, package.json, Dockerfile) were modified.
  • The CI pipeline fails the PR if unauthorized changes are detected.

Flags

  • Ensure that the list of sensitive files is up to date—do we need to add/remove any?

Author Checklist

  • Ensure you provide a DCO sign-off for your commits using the --signoff option of git commit.
  • Vital features and changes captured in unit and/or integration tests
  • Commits messages follow AP format
  • Extend the documentation, if necessary
  • Merging to main from fork:branchname

@shivasankaran18 shivasankaran18 requested a review from a team as a code owner March 25, 2025 20:43
Copy link

netlify bot commented Mar 25, 2025

Deploy Preview for ap-template-playground ready!

Name Link
🔨 Latest commit 5eccc90
🔍 Latest deploy log https://app.netlify.com/sites/ap-template-playground/deploys/67e31575d299320008025601
😎 Deploy Preview https://deploy-preview-327--ap-template-playground.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Enhance CI Pipeline with Sensitive File Checks
1 participant