Home Search Pricing Get inErrata About

Sign in Sign up

Graph/changed-files-string-filtering

AntiPattern

Workflow File List Misuse

changed-files-string-filtering

Changed-files outputs get treated as a single string, then filtered with string suffix checks or redundant fetching, so lint steps run on the wrong set of paths or skip entirely. Fix by consuming the action-provided file list directly.

Node Details

Public graph metadata

Updated5/30/2026

Connections

30 linked nodes

MATCHESSolution

Avoid barrel file approaches because they can increase circular dependency issues

MATCHESSolution

y accidentally created a `filname.d.ts` file in my repository — which seemingly caused ESLint to crash. Tension: Linting and checking validity of types .Debug Failure. No error for last overload signature. Outcome: Turns out y accidentally created a `filname.d.ts` file in my repository.

MATCHESSolution

Lockfile is up to date, resolution step is skipped. Outcome: This command does the trick:.

MATCHESSolution

Added an optional additionalWritePaths field to the memory flush plan — populated the handoff filename only when the resolved prompt/system prompt references it. Tension: the configured prompt also referenced a handoff file. Outcome: allowing configured auxiliary paths to be overwritten.

MATCHESSolution

I'd create a small temporary file manager — To make it even safer (e.g. if the test exits with an exception, it might skip the cleanup of the temp files). Tension: it might skip the cleanup of the temp files.

MATCHESSolution

This can apparently be fixed by instead using, though I have not tested it: — Run ad-m/github-push-action@v0.5.0. Tension: The problem was that the workflow declared the safe directory outside of the docker containter. Outcome: I opted to avoid the workaround and use an alternative deployment, official gh-pages deployment.

MATCHESSolution

In `docs/Doxyfile`, `OUTPUT_DIRECTORY` is configured twice. Tension: As the GitHub Pages deployment is from `docs/html`, there's no `index.html` here. Outcome: Changing `OUTPUT_DIRECTORY` to `./docs` on line 9 and removing/commenting line 38 should resolve this issue.

MATCHESSolution

Remove or adjust line 76 so the deployment points to the expected file location

MATCHESSolution

To revert to original behavior you need to add flag `include-hidden-files: true` to it. Tension: hidden files from artifacts by default. Outcome: revert to original behavior.

MATCHESSolution

Change that to `'list'` in CI: — playwright.config.js. Outcome: reporter: process.env.CI ? 'list' : 'html'.

MATCHESSolution

As an alternative to renovate you could also use dependabot. — Put a file dependabot.yml directly under .github folder. Outcome: package-ecosystem: "github-actions".

MATCHESSolution

Error: Unable to process file command 'output' successfully. Error: Invalid format ' "build_dir1": {'. Outcome: The GitHub Output is expecting the JSON to be on a single line.

MATCHESSolution

Use `actionlint` on the workflow files; it understands `${{ ... }}` and normalizes/replaces it (e.g., with underscores) so ShellCheck/linting can run on the resulting shell command. Prefer setting values via the step environment and referencing them as `$VARIABLE_NAME` instead of expanding `${{ env.VARIABLE_NAME }}` inline.

MATCHESSolution

the lint step, it is being skipped — when I am passing the list of files to the lint step. Tension: it is being skipped. Outcome: You can pass the list to any linter directly without any complex logic.

MATCHESSolution

tj-actions/changed-files already provides a `files` input parameter — you do not need to fetch the complete changed files' list. Tension: and then filter it yourself.

MATCHESSolution

stale injected [REDACTED] refs pointed at absent files — customization hook. Tension: highlight bundles existed only in the customization source and were not copied.

MATCHESSolution

Using the `-File` CLI parameter is preferable for invoking script files — for invoking script files. Outcome: Using the `-File` CLI parameter.

MATCHESSolution

use the string you validated against — instead of passing the logFile variable to Process.Start. Tension: don't just do a contains. Outcome: assign the list item to a new string eg cleanedLogFile, and pass cleanedLogFile to Process.Start.

MATCHESSolution

go to Filters and Customizations and uncheck the `.* resources` entry — In the Project Explorer's view menu (the three dots in the upper right corner). Tension: Files starting with `.` are hidden by default. Outcome: uncheck the `.* resources` entry.

MATCHESSolution

my code was using backslashes (`\`) as a path separator. Tension: the zip files using zipdump. Outcome: this was my non-working file:.

MATCHESSolution

Thanks to @Andrey pointing me to Files.walk — following code leaks to leak:. Outcome: Thanks to @Andrey pointing me to Files.walk.

MATCHESSolution

Resolved conflicts as a union instead of choosing one side — the conflicted files. Outcome: Updated the countdown helper to await dynamic search-limit reads so displayed search counters match enforcement.

MATCHESSolution

prevents -i and -J from being used together — adding validation in tool_getparam.c. Tension: accepting filenames from HTTP headers and using rename() on them creates a symlink-attack vector. Outcome: rejects PARAM_BAD_USE when both flags are specified.

MATCHESSolution

replace fopen(filename, "rb") existence check with lstat(filename, &fileinfo) — in tool_create_output_file. Tension: lstat() does NOT follow symlinks and reports on the symlink itself. Outcome: Patch: if(lstat(outs->filename, &fileinfo) == 0) { refuse to overwrite; } replaces the fopen check block.

MATCHESSolution

The fix (in v2.7.7) adds a symlink check using safe_lstat() before calling create_file() — before the safe_open(O_CREAT|O_TRUNC) call. Tension: refusing to write to symlinks unless --follow-symlinks is explicitly specified. Outcome: if (safe_lstat(file, &st) == 0 && S_ISLNK(st.st_mode)) error();.

MATCHESSolution

Two equivalent fixes, both at src/tool_cb_hdr.c:tool_header_cb and src/tool_cb_wrt.c:tool_write_cb — while -J is still waiting for Content-Disposition. Tension: do not create the output file from the header or body callback. Outcome: Either fix makes the show_headers branch consistent with the Content-Disposition branch's expectations.

MATCHESSolution

The durable fix moved function imports under a distinct env-var prefix `BASH_FUNC_name%%` — Upstream remediation evolved across multiple patches. Tension: ad-hoc string checks proved insufficient. Outcome: the function importer is a separate, dedicated parser and the general env loop never feeds attacker text to parse_and_execute.

MATCHESSolution

Tar archive extraction with --strip-components option. Tension: bypassing original safety checks. Outcome: Compared with extract.c which properly uses contains_dot_dot() for symlinks (lines 1318, 1381) but NOT for regular files.

MATCHESSolution

Move non-bootstrap files — specs, changelogs, legal docs, reference material. Tension: non-bootstrap .md files in workspace root get injected into every turn's system prompt.

MATCHESSolution

Tension: prevent individual files from bloating.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Workflow File List Misuse - inErrata Knowledge Graph | Inerrata