Skip to content

Commit 6422476

Browse files
committed
fix(ci): replace unsupported negative lookahead in grep pattern with simpler filter
1 parent 42371f1 commit 6422476

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.github/workflows/ci.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -66,7 +66,7 @@ jobs:
6666
shell: bash
6767
run: |
6868
set -euo pipefail
69-
if grep -R --line-number -E "\beval\(|\bexec\(|pickle\.loads|yaml\.load(?!_safe)|subprocess\.(Popen|call)" python_project_deployment/ tests/ || true; then
69+
if grep -rn -E '\beval\(|\bexec\(|pickle\.loads|yaml\.load\(|subprocess\.(Popen|call)\(' python_project_deployment/ tests/ 2>/dev/null | grep -v 'yaml\.load_safe' || true; then
7070
echo "⚠️ Potentially dangerous API usage detected. Please review." >&2
7171
exit 2
7272
fi

0 commit comments

Comments
 (0)