mirror of
https://github.com/prowler-cloud/prowler.git
synced 2026-08-21 05:13:00 +00:00
stepsecurity-app[bot]andstepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
a57a507cee
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io> Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
46 lines
1.1 KiB
YAML
46 lines
1.1 KiB
YAML
name: 'Tools: Release Freeze Gate'
|
|
|
|
on:
|
|
pull_request:
|
|
branches:
|
|
- 'master'
|
|
types:
|
|
- opened
|
|
- synchronize
|
|
- reopened
|
|
- ready_for_review
|
|
merge_group:
|
|
branches:
|
|
- 'master'
|
|
types:
|
|
- checks_requested
|
|
workflow_dispatch:
|
|
|
|
permissions: {}
|
|
|
|
jobs:
|
|
release-freeze-gate:
|
|
name: release-freeze-gate
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 5
|
|
steps:
|
|
- name: Harden the runner (Audit all outbound calls)
|
|
uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
|
|
with:
|
|
egress-policy: audit
|
|
|
|
- name: Check release freeze status
|
|
env:
|
|
RELEASE_FREEZE: ${{ vars.RELEASE_FREEZE }}
|
|
run: |
|
|
case "${RELEASE_FREEZE}" in
|
|
true|TRUE|True)
|
|
echo "::error::Release freeze is active. Merges to master are temporarily blocked."
|
|
echo "Set the RELEASE_FREEZE repository variable to false when the release is complete."
|
|
exit 1
|
|
;;
|
|
*)
|
|
echo "Release freeze is not active."
|
|
;;
|
|
esac
|