From b4413e0bb6df39a9658ac4c1999ed4bbb4873e2c Mon Sep 17 00:00:00 2001 From: Kunal Kotwani Date: Wed, 3 Apr 2024 15:07:01 -0700 Subject: [PATCH 1/2] Enhance changelog verifier script Signed-off-by: Kunal Kotwani --- .github/workflows/changelog_verifier.yml | 18 +++++++++++++++--- 1 file changed, 15 insertions(+), 3 deletions(-) diff --git a/.github/workflows/changelog_verifier.yml b/.github/workflows/changelog_verifier.yml index 9456fbf8b4ca0..786905c7fe37a 100644 --- a/.github/workflows/changelog_verifier.yml +++ b/.github/workflows/changelog_verifier.yml @@ -1,19 +1,31 @@ name: "Changelog Verifier" on: pull_request: - types: [opened, edited, review_requested, synchronize, reopened, ready_for_review, labeled, unlabeled] + types: [opened, synchronize, reopened, ready_for_review, labeled, unlabeled] jobs: # Enforces the update of a changelog file on every pull request verify-changelog: - if: github.repository == 'opensearch-project/OpenSearch' + # if: github.repository == 'opensearch-project/OpenSearch' runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 with: token: ${{ secrets.GITHUB_TOKEN }} ref: ${{ github.event.pull_request.head.sha }} - - uses: dangoslen/changelog-enforcer@v3 + id: verify-changelog-3x + with: + skipLabels: "autocut, skip-changelog" + changeLogPath: 'CHANGELOG-3.0.md' + continue-on-error: true + - uses: dangoslen/changelog-enforcer@v3 + id: verify-changelog-2x with: skipLabels: "autocut, skip-changelog" + changeLogPath: 'CHANGELOG-2.0.md' + continue-on-error: true + - run: | + if [[ ${{ steps.verify-changelog-3x.outcome }} == 'failure' && ${{ steps.verify-changelog-2x.outcome }} == 'failure']]; then + exit 1 + fi From f2a6577bc2dd6b808fed73d9a3a10b6b39fec1d6 Mon Sep 17 00:00:00 2001 From: Kunal Kotwani Date: Wed, 3 Apr 2024 15:08:54 -0700 Subject: [PATCH 2/2] Test Signed-off-by: Kunal Kotwani --- .github/workflows/changelog_verifier.yml | 2 +- SECURITY.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/changelog_verifier.yml b/.github/workflows/changelog_verifier.yml index 786905c7fe37a..e425981636db8 100644 --- a/.github/workflows/changelog_verifier.yml +++ b/.github/workflows/changelog_verifier.yml @@ -6,7 +6,7 @@ on: jobs: # Enforces the update of a changelog file on every pull request verify-changelog: - # if: github.repository == 'opensearch-project/OpenSearch' + if: github.repository == 'opensearch-project/OpenSearch' runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 diff --git a/SECURITY.md b/SECURITY.md index b86292104335f..bead9986c59fb 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,3 +1,3 @@ -## Reporting a Vulnerability +## Reporting a Vulnerabilitya If you discover a potential security issue in this project we ask that you notify AWS/Amazon Security via our [vulnerability reporting page](http://aws.amazon.com/security/vulnerability-reporting/) or directly via email to aws-security@amazon.com. Please do **not** create a public GitHub issue.