gravitational/teleport
1
0
Fork 0
mirror of https://github.com/gravitational/teleport.git synced 2026-10-12 02:15:01 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix dependency review workflow (#53815)

Browse Source 
Signed-off-by: Fred Heinecke <[email protected]>
This commit is contained in:
fheinecke
2025-04-08 19:12:18 +00:00
committed by GitHub
parent 944f6825da
commit 666e60e40a
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/dependency-review.yaml
+6 -1
View File
@@ -11,7 +11,12 @@ jobs:
contents: read
pull-requests: write
with:
base-ref: ${{ github.event.pull_request.base.sha || 'master' }}
base-ref: >
${{
github.event_name == 'pull_request' && github.event.pull_request.base.sha ||
github.event_name == 'merge_group' && github.event.merge_group.base_sha ||
'Invalid reference (workflow bug)'
}}
# 'GHSA-6xf3-5hp7-xqqg' is a false positive. That's an old Teleport Vuln,
# but because of the replace, the dependency cannot find the correct
# Teleport version.