Skip to content

Create qcom-preflight-checks.yml#14

Closed
Sandhya1236 wants to merge 1 commit into
qualcomm-linux:qcom-nextfrom
Sandhya1236:QC-Preflight-Checks-Workflow-Addition
Closed

Create qcom-preflight-checks.yml#14
Sandhya1236 wants to merge 1 commit into
qualcomm-linux:qcom-nextfrom
Sandhya1236:QC-Preflight-Checks-Workflow-Addition

Conversation

@Sandhya1236

Copy link
Copy Markdown

Introduced QC Preflight Checks Workflow

Introduced the QC Preflight Checks GitHub Actions workflow with the following updates and configurations:

Added the QC Preflight Checks workflow
Configured the workflow trigger to use pull_request instead of pull_request_target
(Security improvement: pull_request_target runs with write permissions and access to secrets, which is unsafe for untrusted PRs)
Integrated the v2 version of the reusable workflow (qcom-reusable-workflow)
Defined a single job named preflight
Added job display name: Run QC Preflight Checks

Adopted the new v2 input parameter format:
enable-semgrep-scan
enable-dependency-review
enable-repolinter-check
enable-copyright-license-check
enable-commit-email-check
enable-commit-msg-check
enable-armor-checkers

Removed SEMGREP_APP_TOKEN secret, as it is no longer required in v2

Enabled Checks

Only the following checks are enabled:
enable-repolinter-check: true
enable-commit-email-check: true

All other checks are explicitly disabled.
For more details, refer to the https://github.com/qualcomm/qcom-reusable-workflows

Signed-off-by: Sandhya Adavikolanu <sadaviko@qti.qualcomm.com>
@Sandhya1236 Sandhya1236 force-pushed the QC-Preflight-Checks-Workflow-Addition branch from 30785b2 to 9a3279d Compare April 4, 2026 05:04
@b49020

b49020 commented Apr 6, 2026

Copy link
Copy Markdown
Member

@Sandhya1236 this TF-A repo is fork of upstream TF-A repo which exists here: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/. So the pre-flight checks shouldn't be needed on this fork.

@mynameistechno

Copy link
Copy Markdown

@Sandhya1236 this TF-A repo is fork of upstream TF-A repo which exists here: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/. So the pre-flight checks shouldn't be needed on this fork.

Yep @Sandhya1236 we should skip for forks, I guess it's not immediately clear this is a fork via the UI since it's missing the GitHub fork link.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants