abcxyz / abcxyz/secure-setup-terraform

Action taints the workspace by adding untracked files

未關閉
#223 0 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
bug
主要語言
Go
星號
2
分支
3
平均合併
1 天 8 小時
30 天內合併 PR
4

描述

### TL;DR

Running secure-setup-terraform taints the workspace by adding several untracked files like `lint-action`, `lint-terraform`. It also overrides `LICENSE` and `README.md`. These changes interferes with workflows that needs these files.

### Expected behavior

All dependencies are kept in another directory separated from "$GITHUB_WORKSPACE".

### Observed behavior

_No response_

### Environment Details

```markdown
github actions
```

### Additional information

_No response_

貢獻指南

開啟貢獻指南

研究方向

Look at the action's entry point (likely main.go or action.yml) to see where it writes files like 'lint-action' and 'lint-terraform'. Understand the workspace layout and how to isolate dependencies. Check existing tests for file system interactions. The fix involves changing the output directory to a temporary location outside GITHUB_WORKSPACE.

由索引模型根據 Issue 內容生成。

評估

技術堆疊
github-actions
領域
ci-cd, tooling
Issue 類型
缺陷
難度
3/5
預估耗時
1-2 天
活躍度
冷清
描述清晰度
描述清楚
新手友好度
55/100

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。