chore(deps): bump tar from 7.5.9 to 7.5.19 #6747
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build | |
| on: | |
| push: | |
| branches: | |
| - master | |
| - hotfix-* | |
| pull_request: | |
| types: | |
| - opened | |
| - edited | |
| - reopened | |
| - synchronize | |
| # zizmor: ignore[dangerous-triggers] -- intentional: triggers build only when ok-to-test label is added to external PRs, gated by label check in job condition | |
| pull_request_target: | |
| types: | |
| - labeled | |
| merge_group: | |
| permissions: {} | |
| jobs: | |
| build: | |
| if: ${{ github.event_name != 'pull_request_target' || (github.event_name == 'pull_request_target' && github.event.label.name == vars.DEFAULT_LABEL_OK_TO_TEST && vars.DEFAULT_LABEL_OK_TO_TEST != '') }} | |
| uses: ./.github/workflows/build.yaml | |
| with: | |
| mode: snapshot | |
| secrets: | |
| dockerhub-auth-token: ${{ secrets.DOCKERHUB_RO_AUTH }} | |
| permissions: | |
| contents: read | |
| packages: write | |
| id-token: write | |
| component-descriptor: | |
| if: ${{ github.event_name != 'pull_request_target' || (github.event_name == 'pull_request_target' && github.event.label.name == vars.DEFAULT_LABEL_OK_TO_TEST && vars.DEFAULT_LABEL_OK_TO_TEST != '') }} | |
| uses: gardener/cc-utils/.github/workflows/post-build.yaml@v1 # zizmor: ignore[unpinned-uses] -- same-org reusable workflow; intentionally allowed for now, planned to pin to a version in the future | |
| needs: | |
| - build | |
| permissions: | |
| id-token: write | |
| contents: write |