ci: detect more invalid server publish paths (#1620)
## Summary - detect publish attempts under `data/data/servers/` - detect server-looking JSON files directly under `data/` - keep the stage-one and privileged stage-two classifiers in sync ## Testing - verified both new patterns against PRs #1600 and #1589 - verified ordinary files such as `data/example.json` remain unmatched - ran `git diff --check`
This commit is contained in:
parent
5271ba5075
commit
d3fbdc61ce
2 changed files with 4 additions and 0 deletions
|
|
@ -127,6 +127,8 @@ jobs:
|
||||||
for f in "${FILES[@]}"; do
|
for f in "${FILES[@]}"; do
|
||||||
if [[ "$f" == servers/* \
|
if [[ "$f" == servers/* \
|
||||||
|| "$f" == data/servers/* \
|
|| "$f" == data/servers/* \
|
||||||
|
|| "$f" == data/data/servers/* \
|
||||||
|
|| "$f" =~ ^data/[^/]*server\.json$ \
|
||||||
|| "$f" == "data/seed.json" \
|
|| "$f" == "data/seed.json" \
|
||||||
|| "$f" == "server.json" \
|
|| "$f" == "server.json" \
|
||||||
|| "$f" == "servers.json" ]]; then
|
|| "$f" == "servers.json" ]]; then
|
||||||
|
|
|
||||||
|
|
@ -63,6 +63,8 @@ jobs:
|
||||||
for f in "${FILES[@]}"; do
|
for f in "${FILES[@]}"; do
|
||||||
if [[ "$f" == servers/* \
|
if [[ "$f" == servers/* \
|
||||||
|| "$f" == data/servers/* \
|
|| "$f" == data/servers/* \
|
||||||
|
|| "$f" == data/data/servers/* \
|
||||||
|
|| "$f" =~ ^data/[^/]*server\.json$ \
|
||||||
|| "$f" == "data/seed.json" \
|
|| "$f" == "data/seed.json" \
|
||||||
|| "$f" == "server.json" \
|
|| "$f" == "server.json" \
|
||||||
|| "$f" == "servers.json" ]]; then
|
|| "$f" == "servers.json" ]]; then
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue