unkin-agent
ca55c9dd9f
- Reject archive members that are absolute, escape via .., are special files, or link outside the destination, before anything is written - Stage under the pack root so the swap is a same-filesystem rename, with an EXDEV copy fallback; propagate registry auth errors and validate dir_name
21 lines
500 B
YAML
21 lines
500 B
YAML
when:
|
|
- event: pull_request
|
|
|
|
steps:
|
|
- name: pre-commit
|
|
image: alpine:3.21
|
|
commands:
|
|
- apk add --no-cache pre-commit git luacheck stylua
|
|
- git config --global --add safe.directory "$CI_WORKSPACE"
|
|
- pre-commit run --all-files --show-diff-on-failure
|
|
backend_options:
|
|
kubernetes:
|
|
serviceAccountName: vimpack-ci
|
|
resources:
|
|
requests:
|
|
memory: 512Mi
|
|
cpu: 1
|
|
limits:
|
|
memory: 2Gi
|
|
cpu: 2
|