fix(ci): compare release chain against short sha
This commit is contained in:
@@ -98,15 +98,17 @@ jobs:
|
|||||||
EXPECTED_SHA="${{ github.event.workflow_run.head_sha }}"
|
EXPECTED_SHA="${{ github.event.workflow_run.head_sha }}"
|
||||||
RELEASE_TAG="${{ steps.fetch.outputs.tag }}"
|
RELEASE_TAG="${{ steps.fetch.outputs.tag }}"
|
||||||
RELEASE_SHA="${RELEASE_TAG##*.}"
|
RELEASE_SHA="${RELEASE_TAG##*.}"
|
||||||
|
EXPECTED_SHA_SHORT="${EXPECTED_SHA:0:${#RELEASE_SHA}}"
|
||||||
|
|
||||||
if [ "$EXPECTED_SHA" != "$RELEASE_SHA" ]; then
|
if [ "$EXPECTED_SHA_SHORT" != "$RELEASE_SHA" ]; then
|
||||||
echo "ERROR: Release SHA does not match upstream workflow SHA"
|
echo "ERROR: Release SHA does not match upstream workflow SHA"
|
||||||
echo "Expected: $EXPECTED_SHA"
|
echo "Expected: $EXPECTED_SHA"
|
||||||
|
echo "Expected short: $EXPECTED_SHA_SHORT"
|
||||||
echo "Release: $RELEASE_SHA"
|
echo "Release: $RELEASE_SHA"
|
||||||
exit 1
|
exit 1
|
||||||
fi
|
fi
|
||||||
|
|
||||||
echo "✓ Release chain verified: $EXPECTED_SHA"
|
echo "✓ Release chain verified: $EXPECTED_SHA_SHORT"
|
||||||
else
|
else
|
||||||
echo "✓ Workflow dispatch mode — release chain verification skipped"
|
echo "✓ Workflow dispatch mode — release chain verification skipped"
|
||||||
fi
|
fi
|
||||||
|
|||||||
Reference in New Issue
Block a user