瀏覽代碼

Run snyk check in periodic build for each development branch (#133751) (#133757)

we filter by regex for common name pattern of the dev branches to reduce
risk of running from development branch. in reality those periodic builds are
not likely to be triggered by developers so this is a good enough compromise.

Branches that are not developed anymore will stay in snyk for now and require
manual removal.
Rene Groeschke 1 月之前
父節點
當前提交
b6e48d5bae
共有 2 個文件被更改,包括 2 次插入2 次删除
  1. 1 1
      .buildkite/pipelines/periodic.template.yml
  2. 1 1
      .buildkite/pipelines/periodic.yml

+ 1 - 1
.buildkite/pipelines/periodic.template.yml

@@ -230,7 +230,7 @@ steps:
       image: family/elasticsearch-ubuntu-2404
       machineType: n2-standard-8
       buildDirectory: /dev/shm/bk
-    if: build.branch == "main" || build.branch == "9.1" || build.branch == "9.0" || build.branch == "8.19" || build.branch == "8.18" || build.branch == "7.17"
+    if: build.branch =~ /^(main|\d+\.\d+|\d+\.x)$/
   - label: check-branch-consistency
     command: .ci/scripts/run-gradle.sh branchConsistency
     timeout_in_minutes: 15

+ 1 - 1
.buildkite/pipelines/periodic.yml

@@ -953,7 +953,7 @@ steps:
       image: family/elasticsearch-ubuntu-2404
       machineType: n2-standard-8
       buildDirectory: /dev/shm/bk
-    if: build.branch == "main" || build.branch == "9.1" || build.branch == "9.0" || build.branch == "8.19" || build.branch == "8.18" || build.branch == "7.17"
+    if: build.branch =~ /^(main|\d+\.\d+|\d+\.x)$/
   - label: check-branch-consistency
     command: .ci/scripts/run-gradle.sh branchConsistency
     timeout_in_minutes: 15