abcxyz / abcxyz/secure-setup-terraform
Action taints the workspace by adding untracked files
- 主要語言
- Go
- 星號
- 2
- 分支
- 3
- 平均合併
- 1 天 8 小時
- 30 天內合併 PR
- 4
描述
### TL;DR
Running secure-setup-terraform taints the workspace by adding several untracked files like `lint-action`, `lint-terraform`. It also overrides `LICENSE` and `README.md`. These changes interferes with workflows that needs these files.
### Expected behavior
All dependencies are kept in another directory separated from "$GITHUB_WORKSPACE".
### Observed behavior
_No response_
### Environment Details
```markdown
github actions
```
### Additional information
_No response_
貢獻指南
研究方向
Look at the action's entry point (likely main.go or action.yml) to see where it writes files like 'lint-action' and 'lint-terraform'. Understand the workspace layout and how to isolate dependencies. Check existing tests for file system interactions. The fix involves changing the output directory to a temporary location outside GITHUB_WORKSPACE.
由索引模型根據 Issue 內容生成。
評估
- 技術堆疊
- github-actions
- 領域
- ci-cd, tooling
- Issue 類型
- 缺陷
- 難度
- 3/5
- 預估耗時
- 1-2 天
- 活躍度
- 冷清
- 描述清晰度
- 描述清楚
- 新手友好度
- 55/100