Skip to content

Merge remote-tracking branch 'upstream/master' #1862

Merge remote-tracking branch 'upstream/master'

Merge remote-tracking branch 'upstream/master' #1862

name: process_commits
on:
push:
branches:
- master
- main
tags-ignore:
- simple_driller
paths-ignore:
- '.github/**'
workflow_dispatch:
jobs:
# This workflow contains a single job called "build"
add_tags:
# The type of runner that the job will run on
runs-on: ubuntu-latest
steps:
# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
- uses: actions/checkout@v4
with:
fetch-depth: 0
path: code_to_process
token: ${{secrets.VUL_DRILLER_TOKEN}}
- uses: actions/checkout@v4
with:
repository: CERTCC/git_vul_driller
path: git_vul_driller
# Sets up python
- uses: actions/setup-python@v5
with:
python-version: '3.8'
- name: config
run: |
git config --global user.name 'certcc-ghbot'
git config --global user.email '[email protected]'
- name: setup my env
run: |
pushd git_vul_driller
python --version
pip install -r simple_driller_requirements.txt
python setup.py install
- name: process commits
run: |
# env
echo WORKSPACE ${GITHUB_WORKSPACE}
REPOPATH=${GITHUB_WORKSPACE}/code_to_process
echo REPOPATH ${REPOPATH}
pushd ${GITHUB_WORKSPACE}
touch new_tags.txt
simple_driller ${REPOPATH}
- name: push new_tags
run: |
pushd ${GITHUB_WORKSPACE}/code_to_process
# github tends to choke when you try to push too many tags at once
cat ${GITHUB_WORKSPACE}/new_tags.txt | xargs -n100 git push --force origin
- name: remove simple_driller tag
run: |
pushd ${GITHUB_WORKSPACE}/code_to_process
git push --delete origin simple_driller
- name: add simple_driller tag
if: ${{ always() }}
run: |
pushd ${GITHUB_WORKSPACE}/code_to_process
git push origin simple_driller