Skip to content

Commit be0625b

Browse files
committed
Improve step names
1 parent 0e12664 commit be0625b

File tree

1 file changed

+13
-11
lines changed

1 file changed

+13
-11
lines changed

.github/workflows/check-binaries.yml

+13-11
Original file line numberDiff line numberDiff line change
@@ -11,13 +11,16 @@ jobs:
1111
outputs:
1212
report_contents: ${{ steps.save-output.outputs.report_contents }}
1313
steps:
14-
- uses: actions/setup-python@v5
14+
- name: Setup python
15+
uses: actions/setup-python@v5
1516
with:
1617
python-version: '3.11'
17-
- uses: actions/checkout@v4
18+
- name: Checkout code
19+
uses: actions/checkout@v4
1820
with:
1921
ref: main
20-
- uses: robinraju/[email protected]
22+
- name: Download latest release
23+
uses: robinraju/[email protected]
2124
with:
2225
latest: true
2326
fileName: 'aws-lambda-rie*'
@@ -26,19 +29,19 @@ jobs:
2629
id: check-binaries
2730
run: |
2831
make check-binaries
29-
- if: always() && failure() # Failure means there are vulnerabilities
32+
- if: always() && failure() # `always()` to run even if the previous step failed. Failure means that there are vulnerabilities
33+
name: Save content of the vulnerabilities report as GitHub output
3034
id: save-output
31-
name: Save output contents
3235
run: |
3336
report_csv="$(ls -tr output.cve-bin-*.csv 2>/dev/null | tail -n1)" # last file generated
3437
echo "Vulnerabilities stored in $report_csv"
3538
final_report="${report_csv}.txt"
3639
awk -F',' '{n=split($10, path, "/"); print $2,$3,$4,$5,path[n]}' "$report_csv" | column -t > "$final_report" # make the CSV nicer
3740
echo "report_contents<<EOF" >> "$GITHUB_OUTPUT"
38-
cat "$final_report" >> "$GITHUB_OUTPUT"
39-
echo "EOF" >> "$GITHUB_OUTPUT"
41+
cat "$final_report" >> "$GITHUB_OUTPUT"
42+
echo "EOF" >> "$GITHUB_OUTPUT"
4043
- if: always() && steps.check-binaries.outcome == 'failure'
41-
name: Build new version and check
44+
name: Build new binaries and check vulnerabilities again
4245
id: check-new-version
4346
run: |
4447
mkdir ./bin2
@@ -48,18 +51,17 @@ jobs:
4851
echo "latest_version=$latest_version" >> "$GITHUB_OUTPUT"
4952
make check-binaries
5053
- if: always() && steps.check-binaries.outcome == 'failure'
51-
name: Save output for new version
54+
name: Save outputs for the check with the latest build
5255
id: save-new-version
5356
run: |
54-
exit_code=$?
5557
if [ "${{ steps.check-new-version.outcome }}" == "failure" ]; then
5658
fixed="No"
5759
else
5860
fixed="Yes"
5961
fi
6062
echo "fixed=$fixed" >> "$GITHUB_OUTPUT"
6163
- if: always() && steps.check-binaries.outcome == 'failure'
62-
name: Create Issue
64+
name: Create GitHub Issue indicating vulnerabilities
6365
id: create-issue
6466
uses: dacbd/create-issue-action@main
6567
with:

0 commit comments

Comments
 (0)