Skip to content

Other/ci cd updates(AST-160402)#1026

Open
cx-aniket-shinde wants to merge 4 commits into
mainfrom
other/ci-cd-updates
Open

Other/ci cd updates(AST-160402)#1026
cx-aniket-shinde wants to merge 4 commits into
mainfrom
other/ci-cd-updates

Conversation

@cx-aniket-shinde

Copy link
Copy Markdown
Contributor

No description provided.

@stepsecurity-app

Copy link
Copy Markdown
Contributor

Security Policy Alert: Secret Policy Violation

This workflow run has been blocked by StepSecurity's secrets policy because it accesses secrets and the workflow file differs from the default branch.

Secret references detected:

  • secrets.CX_CLIENT_ID at line 58
  • secrets.CX_CLIENT_SECRET at line 59
  • secrets.CX_BASE_URI at line 60
  • secrets.CX_TENANT at line 61
  • secrets.CX_APIKEY at line 62

To approve this workflow, please add the workflows-approved label to this PR.

Note: The label must be added by someone other than the PR author (cx-aniket-shinde) or automation bots to ensure proper security review.

After the label is added, you can re-run the blocked workflow to proceed.

This workflow will be automatically approved once merged into the default branch.

For more information, see StepSecurity's Secret Exfiltration Policy documentation.

@cx-rakesh-kadu cx-rakesh-kadu self-requested a review June 25, 2026 16:13
Comment thread .github/workflows/ci.yml
- name: Verify single lockfile
run: |
if [ -f package-lock.json ] && [ -f yarn.lock ]; then
echo "ERROR: Both lockfiles exist"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

package-lock.json OR yarn.lock are mandatory, workflow should fail if those files are not present. Please add one more condition for this.

# VERIFY SINGLE LOCKFILE
- name: Verify single lockfile
run: |
if [ -f package-lock.json ] && [ -f yarn.lock ]; then

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

package-lock.json OR yarn.lock are mandatory, workflow should fail if those files are not present. Please add one more condition for this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants