[AUTO-CHERRYPICK] [AUTOPATCHER-CORE] Upgrade clamav to 1.0.7 CVE-2024-20505, CVE-2024-20506 - branch main #33268
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Copyright (c) Microsoft Corporation. | |
# Licensed under the MIT License. | |
# This action checks that certain groups of specs have matching tags. | |
# The main use case is to ensure that signed specs have the same Version and | |
# Release tags as their unsigned counterparts | |
name: Spec Entanglement Mismatch Check | |
on: | |
push: | |
branches: [main, dev, 1.0*, 2.0*, fasttrack/*] | |
pull_request: | |
branches: [main, dev, 1.0*, 2.0*, fasttrack/*] | |
permissions: read-all | |
jobs: | |
check: | |
name: Spec Entanglement Mismatch Check | |
runs-on: ubuntu-latest | |
steps: | |
# Checkout the branch of our repo that triggered this action | |
- name: Workflow trigger checkout | |
uses: actions/checkout@v4 | |
# For consistency, we use the same major/minor version of Python that CBL-Mariner ships | |
- name: Setup Python 3.7 | |
uses: actions/setup-python@v4 | |
with: | |
python-version: 3.7 | |
- name: Get Python dependencies | |
run: python3 -m pip install -r toolkit/scripts/requirements.txt | |
- name: Run entanglement checking script | |
run: python3 toolkit/scripts/check_entangled_specs.py . |