Add security notes #3990
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Send submodule updates to parent repo | |
| on: | |
| push: | |
| branches: | |
| - main | |
| jobs: | |
| conditional_job_check_files: | |
| runs-on: ubuntu-latest | |
| # Declare outputs for next jobs | |
| outputs: | |
| docs_changed: ${{ steps.check_file_changed.outputs.docs_changed }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| # Checkout as many commits as needed for the diff | |
| fetch-depth: 2 | |
| - shell: pwsh | |
| id: check_file_changed | |
| run: | | |
| $diff = git diff --name-only HEAD^ HEAD | |
| # Check if a file under docs/ or with the .md extension has changed (added, modified, deleted) | |
| $SourceDiff = $diff | Where-Object { $_ -match '^appledb-web/' -or $_ -match '^deviceFiles/' -or $_ -match '^deviceGroupFiles/' -or $_ -match '^osFiles/' -or $_ -match '^jailbreakFiles/' } | |
| $HasDiff = $SourceDiff.Length -gt 0 | |
| # Set the output named "docs_changed" | |
| Write-Host "::set-output name=docs_changed::$HasDiff" | |
| update_dbweb: | |
| runs-on: ubuntu-latest | |
| needs: [ conditional_job_check_files ] | |
| if: needs.conditional_job_check_files.outputs.docs_changed == 'True' | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| repository: littlebyteorg/appledb-web | |
| token: ${{ secrets.PRIVATE_TOKEN_GITHUB }} | |
| - name: Pull & update submodules recursively | |
| run: | | |
| git submodule update --init appledb | |
| git submodule update --remote appledb | |
| - name: Commit | |
| run: | | |
| git config user.email "[email protected]" | |
| git config user.name "GitHub Actions - update submodules" | |
| git add --all | |
| git commit -m "Update AppleDB submodule" || echo "No changes to commit" | |
| git push | |
| update_cfw: | |
| runs-on: ubuntu-latest | |
| needs: [ conditional_job_check_files ] | |
| if: needs.conditional_job_check_files.outputs.docs_changed == 'True' | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| repository: cfw-guide/ios.cfw.guide | |
| token: ${{ secrets.PRIVATE_TOKEN_GITHUB }} | |
| - name: Pull & update submodules recursively | |
| run: | | |
| git submodule update --init docs/.vuepress/json/appledb | |
| git submodule update --remote docs/.vuepress/json/appledb | |
| - name: Commit | |
| run: | | |
| git config user.email "[email protected]" | |
| git config user.name "GitHub Actions - update submodules" | |
| git add --all | |
| git commit -m "Update AppleDB submodule" || echo "No changes to commit" | |
| git push |