Skip to content

fix(vcr): bound negative OpenID4VCI identifier caching, guard against empty offers #249

fix(vcr): bound negative OpenID4VCI identifier caching, guard against empty offers

fix(vcr): bound negative OpenID4VCI identifier caching, guard against empty offers #249

name: Notify on maintainer PR
on:
# zizmor: ignore[dangerous-triggers] no checkout, no PR-controlled shell commands: only
# same-repo (non-fork) PRs from an allowlisted set of maintainers reach the Slack step
# below, and all PR-derived values are passed through toJSON()/format() into a JSON
# payload rather than interpolated into a shell command.
pull_request_target:
types: [opened, ready_for_review]
branches:
- master
permissions: {}
jobs:
notify:
name: Slack notification
runs-on: ubuntu-latest
permissions:
pull-requests: read
if: |
github.event.pull_request.head.repo.full_name == github.repository &&
!github.event.pull_request.draft &&
contains(fromJSON('["woutslakhorst","reinkrul","gerardsn","stevenvegt"]'), github.event.pull_request.user.login)
steps:
- name: Send Slack message
uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0
with:
webhook: ${{ secrets.SLACK_WEBHOOK_URL_NUTS_CORE_TEAM }} # webhook is linked to a specific slack channel
webhook-type: incoming-webhook
payload: |
{
"text": ${{ toJSON(format('New PR from maintainer {0}: {1}', github.event.pull_request.user.login, github.event.pull_request.title)) }},
"blocks": [
{
"type": "section",
"text": {
"type": "mrkdwn",
"text": ${{ toJSON(format('*New PR from maintainer <https://github.com/{0}|{0}>*', github.event.pull_request.user.login)) }}
}
},
{
"type": "section",
"text": {
"type": "mrkdwn",
"text": ${{ toJSON(format('<{0}|{1}>', github.event.pull_request.html_url, github.event.pull_request.title)) }}
}
}
]
}