diff options
| author | Adin Scannell <ascannell@google.com> | 2020-05-20 22:22:00 -0700 |
|---|---|---|
| committer | Adin Scannell <ascannell@google.com> | 2020-05-20 22:57:52 -0700 |
| commit | 8437ef752d3c8e90327edad0164f3e4d003821c8 (patch) | |
| tree | 6b83b52d1f32fecbd95f03103ddfe6deac0a77c5 | |
| parent | 8298c5bd4d1f836ee4c531a7bf04acff05d7099b (diff) | |
Normalize permissions in the go branch.
Fixes #2722
| -rw-r--r-- | .github/workflows/go.yml | 5 | ||||
| -rwxr-xr-x | tools/go_branch.sh | 6 |
2 files changed, 9 insertions, 2 deletions
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml index 60704f144..744d25c92 100644 --- a/.github/workflows/go.yml +++ b/.github/workflows/go.yml @@ -17,6 +17,7 @@ jobs: -H "Content-Type: application/json" \ -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" \ "${{ github.event.pull_request.statuses_url }}" + if: github.event_name == 'pull_request' - uses: actions/checkout@v2 with: fetch-depth: 0 @@ -47,14 +48,14 @@ jobs: echo -e "protocol=https\nhost=github.com\nusername=${{ secrets.GO_TOKEN }}\npassword=x-oauth-basic" | git credential approve git remote add upstream "https://github.com/${{ github.repository }}" git push upstream go:go - - if: ${{ success() }} + - if: ${{ success() && github.event_name == 'pull_request' }} run: | jq -nc '{"state": "success", "context": "go tests"}' | \ curl -sL -X POST -d @- \ -H "Content-Type: application/json" \ -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" \ "${{ github.event.pull_request.statuses_url }}" - - if: ${{ failure() }} + - if: ${{ failure() && github.event_name == 'pull_request' }} run: | jq -nc '{"state": "failure", "context": "go tests"}' | \ curl -sL -X POST -d @- \ diff --git a/tools/go_branch.sh b/tools/go_branch.sh index e568a0a76..093de89b4 100755 --- a/tools/go_branch.sh +++ b/tools/go_branch.sh @@ -88,6 +88,12 @@ EOF # because they may correspond to unused templates, etc. cp "${repo_orig}"/runsc/*.go runsc/ +# Normalize all permissions. The way bazel constructs the :gopath tree may leave +# some strange permissions on files. We don't have anything in this tree that +# should be execution, only the Go source files, README.md, and ${othersrc}. +find . -type f -exec chmod 0644 {} \; +find . -type d -exec chmod 0755 {} \; + # Update the current working set and commit. git add . && git commit -m "Merge ${head} (automated)" |