CCM-11938: build specification artefacts#178
Conversation
|
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| run: | | ||
| if [ -n "${{ github.event.release.tag_name }}" ]; then | ||
| echo "SANDBOX_TAG=${{ github.event.release.tag_name }}" >> $GITHUB_ENV | ||
| elseif [ -n "${{ inputs.pr_number }}" ]; then |
Check failure
Code scanning / SonarCloud
GitHub Actions should not be vulnerable to script injections High
| if [ -n "${{ github.event.release.tag_name }}" ]; then | ||
| echo "SANDBOX_TAG=${{ github.event.release.tag_name }}" >> $GITHUB_ENV | ||
| elseif [ -n "${{ inputs.pr_number }}" ]; then | ||
| echo "SANDBOX_TAG=pr${{ inputs.pr_number }}" >> $GITHUB_ENV |
Check failure
Code scanning / SonarCloud
GitHub Actions should not be vulnerable to script injections High
| - name: Determing backend env | ||
| shell: bash | ||
| run: | | ||
| if [ -n "${{ inputs.pr_number }}" ]; then |
Check failure
Code scanning / SonarCloud
GitHub Actions should not be vulnerable to script injections High
| shell: bash | ||
| run: | | ||
| if [ -n "${{ inputs.pr_number }}" ]; then | ||
| echo "BACKEND_ENV=pr${{ inputs.pr_number }}" >> $GITHUB_ENV |
Check failure
Code scanning / SonarCloud
GitHub Actions should not be vulnerable to script injections High
| - name: Setup Proxy Name and target | ||
| shell: bash | ||
| run: | | ||
| echo "INSTANCE=${{ inputs.api_name }}-$BACKEND_ENV" >> $GITHUB_ENV |
Check failure
Code scanning / SonarCloud
GitHub Actions should not be vulnerable to script injections High
| run: | | ||
| echo "INSTANCE=${{ inputs.api_name }}-$BACKEND_ENV" >> $GITHUB_ENV | ||
| echo "MTLS_NAME=notify-supplier-mtls-$BACKEND_ENV" >> $GITHUB_ENV | ||
| echo "TARGET=https://$BACKEND_ENV.suppliers.${{ inputs.backend_account }}.nhsnotify.national.nhs.uk" >> $GITHUB_ENV |
Check failure
Code scanning / SonarCloud
GitHub Actions should not be vulnerable to script injections High
| working-directory: . | ||
| shell: bash | ||
| run: | | ||
| make build-json-oas-spec APIM_ENV=${{ inputs.apim_env }} |
Check failure
Code scanning / SonarCloud
GitHub Actions should not be vulnerable to script injections High
2 participants
Description
Context
Type of changes
Checklist
Sensitive Information Declaration
To ensure the utmost confidentiality and protect your and others privacy, we kindly ask you to NOT including PII (Personal Identifiable Information) / PID (Personal Identifiable Data) or any other sensitive data in this PR (Pull Request) and the codebase changes. We will remove any PR that do contain any sensitive information. We really appreciate your cooperation in this matter.