vrr/openclaw
2
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-08-31 02:18:08 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 24

fix(ci): trust dependency approvers before graph compare (#123456)

Browse source
This commit is contained in:
Peter Steinberger 2026-08-13 21:03:34 -07:00 • committed by GitHub
parent 860aeed8f6
commit 27c4433939
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 24 additions and 22 deletions
Download patch file Download diff file Expand all files Collapse all files

42
scripts/github/dependency-guard.mjs
View file

@ -792,27 +792,6 @@ async function main() {
return;
}
const dependencyGraphChanges = await api.paginate(
`/repos/${owner}/${repo}/dependency-graph/compare/${pullRequest.base?.sha}...${pullRequest.head?.sha}`,
);
if (isRemovalOnlyDependencyGraphChange(dependencyGraphChanges)) {
if (mode === "detect") {
await setOutput("autoscrub", "false");
}
await upsertComment(
existingGuardComment,
renderRemovalOnlyDependencyComment({
dependencyGraphChanges,
headSha: pullRequest.head?.sha,
}),
);
await writeSummary(
"## Dependency Guard\n\nDependency removals are informational and do not require security approval.",
);
console.log("Dependency removals detected; guard is informational.");
return;
}
const { isSecurityMember, isRepositoryAdmin } = createGuardApproverChecks({
api,
owner,
@ -867,6 +846,27 @@ async function main() {
return;
}
const dependencyGraphChanges = await api.paginate(
`/repos/${owner}/${repo}/dependency-graph/compare/${pullRequest.base?.sha}...${pullRequest.head?.sha}`,
);
if (isRemovalOnlyDependencyGraphChange(dependencyGraphChanges)) {
if (mode === "detect") {
await setOutput("autoscrub", "false");
}
await upsertComment(
existingGuardComment,
renderRemovalOnlyDependencyComment({
dependencyGraphChanges,
headSha: pullRequest.head?.sha,
}),
);
await writeSummary(
"## Dependency Guard\n\nDependency removals are informational and do not require security approval.",
);
console.log("Dependency removals detected; guard is informational.");
return;
}
const autoscrubCandidate = shouldAutoscrubDependencyLockfiles({
dependencyFiles,
lockfileChanges,