This is an automated email from the ASF dual-hosted git repository.
nfilotto pushed a commit to branch essobedo/fix-rce-in-comment-action
in repository https://gitbox.apache.org/repos/asf/camel.git
commit e9aa1728803565f53b09f5036b8d25a0d47877f2
Author: Nicolas Filotto <nfilo...@talend.com>
AuthorDate: Mon May 27 17:38:40 2024 +0200
(chores) ci: fix vulnerability by using directly referenced action
---
.github/actions/component-test/action.yaml | 4 ++--
.github/workflows/pr-comment.yml | 2 +-
.gitmodules | 3 ---
3 files changed, 3 insertions(+), 6 deletions(-)
diff --git a/.github/actions/component-test/action.yaml
b/.github/actions/component-test/action.yaml
index 4c1b456d1d5..ddbd53b4bb6 100644
--- a/.github/actions/component-test/action.yaml
+++ b/.github/actions/component-test/action.yaml
@@ -65,7 +65,7 @@ runs:
path: tests.log
- name: Success comment
if: success()
- uses: ./.github/actions/create-or-update-comment
+ uses: peter-evans/create-or-update-comment@v3
with:
comment-id: ${{ inputs.comment-id }}
edit-mode: replace
@@ -75,7 +75,7 @@ runs:
**Result** :white_check_mark: The tests passed successfully
- name: Failure comment
if: failure()
- uses: ./.github/actions/create-or-update-comment
+ uses: peter-evans/create-or-update-comment@v3
with:
comment-id: ${{ inputs.comment-id }}
edit-mode: replace
diff --git a/.github/workflows/pr-comment.yml b/.github/workflows/pr-comment.yml
index a1fbb7e743f..4c41152a19e 100644
--- a/.github/workflows/pr-comment.yml
+++ b/.github/workflows/pr-comment.yml
@@ -47,7 +47,7 @@ jobs:
with:
ref: ${{ env.pr_sha }}
submodules: recursive
- - uses: ./.github/actions/create-or-update-comment
+ - uses: peter-evans/create-or-update-comment@v3
with:
issue-number: ${{ github.event.issue.number }}
body: |
diff --git a/.gitmodules b/.gitmodules
deleted file mode 100644
index e10cc9959c1..00000000000
--- a/.gitmodules
+++ /dev/null
@@ -1,3 +0,0 @@
-[submodule ".github/actions/create-or-update-comment"]
- path = .github/actions/create-or-update-comment
- url = https://github.com/peter-evans/create-or-update-comment.git
