From 2438a6ba0fc7abb51bd9dcce3a979e0a83f95db5 Mon Sep 17 00:00:00 2001 From: Cristian Felipe Cruz Buitron Date: Fri, 14 Aug 2026 22:59:31 -0500 Subject: [PATCH] =?UTF-8?q?fix(ci):=20corregir=20indentaci=C3=B3n=20YAML?= =?UTF-8?q?=20rota=20en=20el=20step=20de=20Semgrep?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit El python3 -c "..." embebido dentro del run: | tenía el código pegado a columna 0, por debajo de la indentación del bloque YAML -- eso corta el block scalar ahí mismo y Gitea terminaba ignorando el workflow completo ("could not find expected ':'"), silenciosamente, desde el commit de Semgrep. Validado con un parser YAML real (no solo con builds de Docker) y bash -n sobre los 20 steps del archivo. --- .gitea/workflows/build.yaml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml index 12bc140..c027668 100644 --- a/.gitea/workflows/build.yaml +++ b/.gitea/workflows/build.yaml @@ -289,13 +289,13 @@ jobs: -w /src \ "${SEMGREP_IMAGE}" \ python3 -c " -import json -data = json.load(open('semgrep-report.json')) -results = data.get('results', []) -print(f'Hallazgos: {len(results)}') -for r in results: - print(f\" [{r['extra']['severity']}] {r['check_id']} - {r['path']}:{r['start']['line']}\") -" + import json + data = json.load(open('semgrep-report.json')) + results = data.get('results', []) + print(f'Hallazgos: {len(results)}') + for r in results: + print(f\" [{r['extra']['severity']}] {r['check_id']} - {r['path']}:{r['start']['line']}\") + " - name: Publicar reporte de Semgrep if: always()