This is an automated email from the ASF dual-hosted git repository.
tuhaihe pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/cloudberry-pxf.git
The following commit(s) were added to refs/heads/main by this push:
new f89b6503 Extend binary file check with deb, rpm, gppkg and bin
extensions
f89b6503 is described below
commit f89b65037d31f2b09fb7baf9875efa55a09fb2e6
Author: Dianjin Wang <[email protected]>
AuthorDate: Wed Sep 23 10:11:33 2026 +0800
Extend binary file check with deb, rpm, gppkg and bin extensions
The workflow's binary detection (the only mechanism that actually blocks
binaries, since RAT only flags them as BINARY without failing) covered
class, jar, tar, tgz, zip, exe, dll, so, gz and bz2. Add deb, rpm, gppkg
and bin, none of which RAT recognizes at all.
Also prune build-output directories (.git, target, build, .gradle) from
the find, so local or future CI steps that run a build before this check
cannot trip it with artifacts such as gradle's last-build.bin.
---
.github/workflows/apache-rat-audit.yml | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/.github/workflows/apache-rat-audit.yml
b/.github/workflows/apache-rat-audit.yml
index ffa2530c..6ca6b94a 100644
--- a/.github/workflows/apache-rat-audit.yml
+++ b/.github/workflows/apache-rat-audit.yml
@@ -106,7 +106,7 @@ jobs:
- name: Check for binary files
run: |
echo "Checking for binary files..."
- echo "Checking extensions: class, jar, tar, tgz, zip, exe, dll, so,
gz, bz2"
+ echo "Checking extensions: class, jar, tar, tgz, zip, exe, dll, so,
gz, bz2, deb, rpm, gppkg, bin"
echo
"----------------------------------------------------------------------"
# Binary file allowlist, see README.apache.md
@@ -120,14 +120,14 @@ jobs:
)
# Check for specific binary file extensions
- binary_extensions="class jar tar tgz zip exe dll so gz bz2"
+ binary_extensions="class jar tar tgz zip exe dll so gz bz2 deb rpm
gppkg bin"
echo "BINARY_EXTENSIONS=${binary_extensions}" >> $GITHUB_ENV
binary_results=""
binaryfiles_found=false
for extension in ${binary_extensions}; do
printf "Checking *.%-4s files..." "${extension}"
- found=$(find . -name "*.${extension}" -type f || true)
+ found=$(find . \( -path ./.git -o -path '*/target' -o -path
'*/build' -o -path '*/.gradle' \) -prune -o -name "*.${extension}" -type f
-print || true)
# Filter out allowed files
if [ -n "$found" ]; then
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
