Skip to content

Remove vulnerable PR-comment artifact pattern#1031

Merged
mashehu merged 1 commit into
masterfrom
patch
Jul 24, 2026
Merged

Remove vulnerable PR-comment artifact pattern#1031
mashehu merged 1 commit into
masterfrom
patch

Conversation

@mashehu

@mashehu mashehu commented Jul 24, 2026

Copy link
Copy Markdown
Contributor

Security patch

This PR applies a security fix included in nf-core/tools 4.0.3 for a potential exploit in the GitHub Actions workflows that post comments on pull requests.

For details, see the related security advisory: https://nf-co.re/advisories/pr-comment-workflow-vulnerability

The fix must be merged into the default branch to take effect. Please merge this PR as soon as possible.

These changes only affect CI workflows, so merging them into the default branch does not require a new pipeline release.

@nf-core-bot

Copy link
Copy Markdown
Member

Warning

Newer version of the nf-core template is available.

Your pipeline is using an old version of the nf-core template: 4.0.2.
Please update your pipeline to the latest version.

For more documentation on how to update your pipeline, please see the Synchronisation documentation.

@github-actions

Copy link
Copy Markdown

nf-core pipelines lint overall result: Passed ✅ ⚠️

Posted for pipeline commit f079c45

+| ✅ 388 tests passed       |+
#| ❔  13 tests were ignored |#
!| ❗ 108 tests had warnings |!
Details

❗ Test warnings:

❔ Tests ignored:

  • files_exist - File is ignored: conf/igenomes.config
  • files_exist - File is ignored: .github/workflows/linting_comment.yml
  • nextflow_config - Config default ignored: params.report_template
  • nextflow_config - Config default ignored: params.report_css
  • nextflow_config - Config default ignored: params.report_logo
  • files_unchanged - File ignored due to lint config: .gitattributes
  • files_unchanged - File ignored due to lint config: .github/workflows/branch.yml
  • files_unchanged - File does not exist: .github/workflows/linting_comment.yml
  • files_unchanged - File ignored due to lint config: .github/workflows/linting.yml
  • files_unchanged - File ignored due to lint config: assets/nf-core-ampliseq_logo_light.png
  • files_unchanged - File ignored due to lint config: docs/images/nf-core-ampliseq_logo_light.png
  • files_unchanged - File ignored due to lint config: docs/images/nf-core-ampliseq_logo_dark.png
  • files_unchanged - File ignored due to lint config: .gitignore or .prettierignore

✅ Tests passed:

Run details

  • nf-core/tools version 4.0.2
  • Run at 2026-07-24 13:31:03

@mashehu
mashehu merged commit d56f90c into master Jul 24, 2026
90 of 104 checks passed
@mashehu
mashehu deleted the patch branch July 24, 2026 13:49
@github-actions

Copy link
Copy Markdown

❌ nf-test failed with latest Nextflow version

Note

Tests with Nextflow's latest version failed but it will not cause a CI workflow failure.
Please check if the failure is expected with newer (edge-)releases of Nextflow or if it needs fixing.

  • singularity | latest-everything | Shard 11/16

See the full run for details.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants