@7n/rules-ci-github 1.4.0 → 1.4.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,11 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## [1.4.1] - 2026-07-18
|
|
4
|
+
|
|
5
|
+
### Fixed
|
|
6
|
+
|
|
7
|
+
- service_deploy_workflow: тригер-перевірка on.push.paths не бачила блок `on` після conftest-конвеєра YAML→JSON (bool-ключ YAML 1.1 серіалізується в рядок "true") — хибний deny «paths не містить glob» на валідних deploy-*.yml
|
|
8
|
+
|
|
3
9
|
## [1.4.0] - 2026-07-18
|
|
4
10
|
|
|
5
11
|
### Added
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@7n/rules-ci-github",
|
|
3
|
-
"version": "1.4.
|
|
3
|
+
"version": "1.4.1",
|
|
4
4
|
"description": "\u041f\u043b\u0430\u0433\u0456\u043d @7n/rules: \u043a\u0430\u043d\u043e\u043d GitHub Actions (.github/workflows) \u2014 \u043e\u0431\u043e\u0432'\u044f\u0437\u043a\u043e\u0432\u0456 workflow, zizmor, VS Code",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"github-actions",
|
|
@@ -24,8 +24,13 @@ import rego.v1
|
|
|
24
24
|
|
|
25
25
|
jobs := object.get(input, "jobs", {})
|
|
26
26
|
|
|
27
|
-
# YAML-парсери розходяться щодо `on:`: YAML 1.2 → ключ "on", YAML 1.1 → bool true
|
|
28
|
-
|
|
27
|
+
# YAML-парсери розходяться щодо `on:`: YAML 1.2 → ключ "on", YAML 1.1 → bool true,
|
|
28
|
+
# а конвеєр conftest (YAML→JSON) серіалізує bool-ключ у РЯДОК "true" — покриваємо всі три.
|
|
29
|
+
on_block := object.union_n([
|
|
30
|
+
object.get(input, "on", {}),
|
|
31
|
+
object.get(input, true, {}),
|
|
32
|
+
object.get(input, "true", {}),
|
|
33
|
+
])
|
|
29
34
|
|
|
30
35
|
push_paths contains p if some p in object.get(object.get(on_block, "push", {}), "paths", [])
|
|
31
36
|
|