From 3393d60b679bdb01ea891a3f49f36c9a9b3ccdb1 Mon Sep 17 00:00:00 2001
From: Eason Su <eason.su.tw@gmail.com>
Date: Mon, 13 May 2024 15:46:30 +0800
Subject: [PATCH] Test the `run-qit-annotate` action.

---
 .github/workflows/run-qit-all.yml             | 26 ++++++++++---------
 .../actions/run-qit-extension/action.yml      | 10 +++----
 2 files changed, 19 insertions(+), 17 deletions(-)

diff --git a/.github/workflows/run-qit-all.yml b/.github/workflows/run-qit-all.yml
index 80f37b5d..fbc70824 100644
--- a/.github/workflows/run-qit-all.yml
+++ b/.github/workflows/run-qit-all.yml
@@ -55,7 +55,9 @@ on:
       options:
         description: 'Additional options for `qit` command, like `--optional_features=hpos`.'
         required: false
-
+  push:
+    branches:
+      - test/avoid-actions-malicious-input
 
 jobs:
     qit-tests:
@@ -66,20 +68,20 @@ jobs:
           fail-fast: false
           matrix:
             # List of extensions to be tested.
-            extension: [automatewoo, automatewoo-birthdays, automatewoo-referrals, google-listings-and-ads, woocommerce-google-analytics-integration]
+            extension: [google-listings-and-ads, woocommerce-google-analytics-integration]
         steps:
           - name: Run QIT
-            uses: woocommerce/grow/run-qit-extension@actions-v1
+            uses: woocommerce/grow/packages/github-actions/actions/run-qit-extension@test/avoid-actions-malicious-input
             with:
               qit-partner-user: ${{ secrets.QIT_PARTNER_USER }}
               qit-partner-secret: ${{ secrets.QIT_PARTNER_SECRET }}
-              version: ${{ inputs.version }}
-              wait: ${{ inputs.wait }}
-              test-activation: ${{ inputs.test-activation }}
-              test-security: ${{ inputs.test-security }}
-              test-phpstan: ${{ inputs.test-phpstan }}
-              test-api: ${{ inputs.test-api }}
-              test-e2e: ${{ inputs.test-e2e }}
+              version: dev
+              # wait: true
+              test-activation: true
+              test-security: true
+              test-phpstan: true
+              test-api: true
+              test-e2e: true
               extension: ${{ matrix.extension }}
-              ignore-fail: ${{ inputs.ignore-fail }}
-              options: ${{ inputs.options }}
+              # ignore-fail: ${{ inputs.ignore-fail }}
+              # options: ${{ inputs.options }}
diff --git a/packages/github-actions/actions/run-qit-extension/action.yml b/packages/github-actions/actions/run-qit-extension/action.yml
index e0ec029b..2dfe5c0c 100644
--- a/packages/github-actions/actions/run-qit-extension/action.yml
+++ b/packages/github-actions/actions/run-qit-extension/action.yml
@@ -92,7 +92,7 @@ runs:
 
     - name: Activation test
       if: ${{ inputs.test-activation == 'true' }}
-      uses: woocommerce/grow/run-qit-annotate@actions-v1
+      uses: woocommerce/grow/run-qit-annotate@fix/avoid-actions-malicious-input-test-build
       with:
         type: activation
         extension: ${{ inputs.extension }}
@@ -103,7 +103,7 @@ runs:
 
     - name: Security test
       if: ${{ inputs.test-security == 'true' }}
-      uses: woocommerce/grow/run-qit-annotate@actions-v1
+      uses: woocommerce/grow/run-qit-annotate@fix/avoid-actions-malicious-input-test-build
       with:
         type: security
         extension: ${{ inputs.extension }}
@@ -114,7 +114,7 @@ runs:
 
     - name: PHPStan test
       if: ${{ inputs.test-phpstan == 'true' }}
-      uses: woocommerce/grow/run-qit-annotate@actions-v1
+      uses: woocommerce/grow/run-qit-annotate@fix/avoid-actions-malicious-input-test-build
       with:
         type: phpstan
         extension: ${{ inputs.extension }}
@@ -125,7 +125,7 @@ runs:
 
     - name: API test
       if: ${{ inputs.test-api == 'true' }}
-      uses: woocommerce/grow/run-qit-annotate@actions-v1
+      uses: woocommerce/grow/run-qit-annotate@fix/avoid-actions-malicious-input-test-build
       with:
         type: woo-api
         extension: ${{ inputs.extension }}
@@ -136,7 +136,7 @@ runs:
 
     - name: E2E test
       if: ${{ inputs.test-e2e == 'true' }}
-      uses: woocommerce/grow/run-qit-annotate@actions-v1
+      uses: woocommerce/grow/run-qit-annotate@fix/avoid-actions-malicious-input-test-build
       with:
         type: woo-e2e
         extension: ${{ inputs.extension }}