ci: shallow checkout OpenGrep PR scan · openclaw/openclaw@9d68c67
vincentkoc
·
2026-04-30
·
via Recent Commits to openclaw:main
| Original file line number | Diff line number | Diff line change |
|---|
@@ -11,6 +11,7 @@ on:
|
11 | 11 | pull_request: |
12 | 12 | types: [opened, synchronize, reopened, ready_for_review] |
13 | 13 | paths: |
| 14 | + - ".github/actions/ensure-base-commit/**" |
14 | 15 | - ".github/workflows/opengrep-precise.yml" |
15 | 16 | - ".github/workflows/opengrep-precise-full.yml" |
16 | 17 | - ".semgrepignore" |
|
42 | 43 | - name: Checkout |
43 | 44 | uses: actions/checkout@v6 |
44 | 45 | with: |
| 46 | +ref: ${{ github.sha }} |
| 47 | +fetch-depth: 1 |
| 48 | +fetch-tags: false |
45 | 49 | persist-credentials: false |
46 | | -# `scripts/run-opengrep.sh --changed` diffs base...HEAD. |
47 | | -fetch-depth: 0 |
| 50 | +submodules: false |
| 51 | + |
| 52 | + - name: Ensure PR base commit |
| 53 | +uses: ./.github/actions/ensure-base-commit |
| 54 | +with: |
| 55 | +base-sha: ${{ github.event.pull_request.base.sha }} |
| 56 | +fetch-ref: ${{ github.event.pull_request.base.ref }} |
48 | 57 | |
49 | 58 | - name: Install opengrep |
50 | 59 | env: |
|
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。
