libs/.github/workflows/driver-api-version.yml at master · falcosecurity/libs · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
# NOTE: it is UNSAFE to run ANY kind of script when using the pull_request_target trigger!
# DO NOT TOUCH THIS FILE UNLESS THE TRIGGER IS CHANGED.
# See warning in https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#pull_request_target.

name: Driver API_VERSION checks
on:
  pull_request_target:
    paths:
      - 'userspace/libscap/engine/bpf/**'
      - 'userspace/libscap/engine/modern_bpf/**'
      - 'userspace/libscap/engine/kmod/**'
      - 'driver/ppm_events_public.h'
      - 'driver/modern_bpf/maps/maps.h'

jobs:
  paths-filter:
    runs-on: ubuntu-24.04
    outputs:
      driver_api_changed: ${{ steps.filter.outputs.driver_api }}
    steps:
    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
    - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
      id: filter
      with:
        filters: |
          driver_api:
            - 'driver/API_VERSION'

  driver-api:
    runs-on: ubuntu-24.04
    permissions:
      pull-requests: write
    needs: paths-filter
    if: needs.paths-filter.outputs.driver_api_changed == 'false'
    steps:
      - name: Check driver API_VERSION
        uses: mshick/add-pr-comment@8e4927817251f1ff60c001f04568532b38e0b4a0 # v3.11.0.8.3.11.0
        with:
          message: |
            Please double check **driver/API_VERSION** file. See [versioning](https://github.com/falcosecurity/libs/blob/master/driver/README.VERSION.md#api-version-number).

            /hold