zuul
/
zuul-jobs
Code Issues Proposed changes

dco-license: remove the empty nodeset 

The job was relying on a security hole to execute untrusted command
on the executor (localhost). This change prevents failure after the
hole is fixed.

Change-Id: I910fb6e6a2659e77991111c8ce5a6b763556aeec
This commit is contained in:
Tristan Cacqueray 2020-07-22 13:39:21 +00:00
parent 9ee30e5216
commit 61228901c2
2 changed files with 1 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
playbooks/dco-license/run.yaml
View File

@ -1,4 +1,4 @@
- hosts: localhost
- hosts: all
roles:
- role: validate-dco-license
zuul_work_dir: "{{ zuul.executor.work_root }}/{{ zuul.project.src_dir }}"

2
zuul.d/general-jobs.yaml
View File

@ -5,8 +5,6 @@
description: |
A job to validate all new commits have been signed using --signoff.
run: playbooks/dco-license/run.yaml
nodeset:
nodes: []
- job:
name: unittests