Fix subprocess isolation install step never running (#1148)
env context isn't available in composite-action if: conditions.
Move opt-out check into run: body.
🏠 Remote-Dev: homespace
This commit is contained in:
parent
58dbe8ed68
commit
c95e735eb1
@ -198,10 +198,14 @@ runs:
|
|||||||
- name: Install subprocess isolation dependencies
|
- name: Install subprocess isolation dependencies
|
||||||
# Install subprocess isolation dependencies when processing content from non-write users.
|
# Install subprocess isolation dependencies when processing content from non-write users.
|
||||||
# Best-effort: skips on non-Linux or when sudo/apt unavailable (self-hosted runners).
|
# Best-effort: skips on non-Linux or when sudo/apt unavailable (self-hosted runners).
|
||||||
if: ${{ inputs.allowed_non_write_users != '' && env.CLAUDE_CODE_SUBPROCESS_ENV_SCRUB != '0' && runner.os == 'Linux' }}
|
if: ${{ inputs.allowed_non_write_users != '' && runner.os == 'Linux' }}
|
||||||
continue-on-error: true
|
continue-on-error: true
|
||||||
shell: bash
|
shell: bash
|
||||||
run: |
|
run: |
|
||||||
|
if [ "${CLAUDE_CODE_SUBPROCESS_ENV_SCRUB:-}" = "0" ]; then
|
||||||
|
echo "Subprocess isolation opted out via CLAUDE_CODE_SUBPROCESS_ENV_SCRUB=0"
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
if command -v apt-get >/dev/null && command -v sudo >/dev/null; then
|
if command -v apt-get >/dev/null && command -v sudo >/dev/null; then
|
||||||
for i in 1 2 3; do
|
for i in 1 2 3; do
|
||||||
sudo apt-get update -qq && sudo apt-get install -y --no-install-recommends bubblewrap socat && break
|
sudo apt-get update -qq && sudo apt-get install -y --no-install-recommends bubblewrap socat && break
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user