From 2832f335d92052d4d336c097a5fc6f4ed0856ec3 Mon Sep 17 00:00:00 2001 From: Bill Coloe Date: Fri, 8 Aug 2025 11:51:43 -0500 Subject: [PATCH 1/4] Add log --- .github/workflows/e2e_schedule_and_push.yml | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/.github/workflows/e2e_schedule_and_push.yml b/.github/workflows/e2e_schedule_and_push.yml index 69c4e9f2a9c..972fa03e10c 100644 --- a/.github/workflows/e2e_schedule_and_push.yml +++ b/.github/workflows/e2e_schedule_and_push.yml @@ -31,10 +31,10 @@ jobs: fail-fast: false matrix: user: - - { index: 1, name: 'USER_1' } - - { index: 2, name: 'USER_2' } - - { index: 3, name: 'USER_3' } - - { index: 4, name: 'USER_4' } + - { index: 1, name: "USER_1" } + - { index: 2, name: "USER_2" } + - { index: 3, name: "USER_3" } + - { index: 4, name: "USER_4" } steps: - uses: actions/checkout@v4 - uses: pnpm/action-setup@v4 @@ -44,6 +44,7 @@ jobs: - uses: actions/setup-node@v4 with: node-version: "20.17" + - run: echo "Hello World" - run: | echo "GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}" >> $GITHUB_ENV - run: | From 8e9065b1f8d7dc7081a56736023ecfa179c89ca0 Mon Sep 17 00:00:00 2001 From: Bill Coloe Date: Fri, 8 Aug 2025 11:54:48 -0500 Subject: [PATCH 2/4] Add workflow_dispatch --- .github/workflows/e2e_schedule_and_push.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/e2e_schedule_and_push.yml b/.github/workflows/e2e_schedule_and_push.yml index 972fa03e10c..413c33e0aac 100644 --- a/.github/workflows/e2e_schedule_and_push.yml +++ b/.github/workflows/e2e_schedule_and_push.yml @@ -15,6 +15,7 @@ env: CY_TEST_SPLIT_RUN: 1 CY_TEST_SPLIT_RUN_TOTAL: 4 on: + workflow_dispatch: schedule: - cron: "0 13 * * 1-5" push: From 8ade4914f71819b02ac30cbd411f476a89ac0b7a Mon Sep 17 00:00:00 2001 From: Bill Coloe Date: Fri, 8 Aug 2025 15:42:07 -0500 Subject: [PATCH 3/4] Use env --- .github/workflows/e2e_schedule_and_push.yml | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/.github/workflows/e2e_schedule_and_push.yml b/.github/workflows/e2e_schedule_and_push.yml index 413c33e0aac..fd3da75a1ba 100644 --- a/.github/workflows/e2e_schedule_and_push.yml +++ b/.github/workflows/e2e_schedule_and_push.yml @@ -15,7 +15,6 @@ env: CY_TEST_SPLIT_RUN: 1 CY_TEST_SPLIT_RUN_TOTAL: 4 on: - workflow_dispatch: schedule: - cron: "0 13 * * 1-5" push: @@ -45,7 +44,6 @@ jobs: - uses: actions/setup-node@v4 with: node-version: "20.17" - - run: echo "Hello World" - run: | echo "GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}" >> $GITHUB_ENV - run: | @@ -55,7 +53,7 @@ jobs: echo "REACT_APP_API_ROOT=${{ secrets.REACT_APP_API_ROOT }}" >> ./packages/manager/.env echo "REACT_APP_APP_ROOT=${{ secrets.REACT_APP_APP_ROOT }}" >> ./packages/manager/.env echo "REACT_APP_DISABLE_NEW_RELIC=1" >> ./packages/manager/.env - echo "MANAGER_OAUTH=${{ secrets[matrix.user.name] }}" >> ./packages/manager/.env + echo "MANAGER_OAUTH=${{ env[matrix.user.name] }}" >> ./packages/manager/.env echo "CY_TEST_SPLIT_RUN_INDEX=${{ matrix.user.index }}" >> ./packages/manager/.env - run: pnpm install --frozen-lockfile - run: pnpm run --filter @linode/validation build From 0c7602f3ddd0b7807ec980bfd6cf71352f9ccb82 Mon Sep 17 00:00:00 2001 From: Bill Coloe Date: Mon, 11 Aug 2025 12:25:21 -0500 Subject: [PATCH 4/4] Added changeset: Fix Excessive Secrets Exposure vulnerability in E2E GitHub Action --- .../.changeset/pr-12664-tech-stories-1754933120939.md | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 packages/manager/.changeset/pr-12664-tech-stories-1754933120939.md diff --git a/packages/manager/.changeset/pr-12664-tech-stories-1754933120939.md b/packages/manager/.changeset/pr-12664-tech-stories-1754933120939.md new file mode 100644 index 00000000000..5a1c391de20 --- /dev/null +++ b/packages/manager/.changeset/pr-12664-tech-stories-1754933120939.md @@ -0,0 +1,5 @@ +--- +"@linode/manager": Tech Stories +--- + +Fix Excessive Secrets Exposure vulnerability in E2E GitHub Action ([#12664](https://github.com/linode/manager/pull/12664))