Skip to content

Current GitHub workflow can allow a PR to be merged despite failing build checks #6051

Description

@sharadsw

The current workflow checks if the changed files belong to the frontend or the backend and runs build checks for those parts accordingly. This can allow PRs to be merged even with failed checks in some cases.

Example:

  1. Push a commit with frontend changes
  2. Changes don't pass the frontend checks, PR is blocked from being merged
  3. Push a commit after that with only backend changes
  4. Workflow runs only the backend checks
  5. If the checks pass for the backend, PR can be merged despite having failing frontend checks

I've noticed this in some of my PRs but here's an example where a PR was merged to prod despite having failed checks:
In #5240, commit 3940702 fails frontend checks but the later commits involve only the backend and the checks pass allowing the PR to be merged.

Solution: Remove the check for frontend/backend and run all checks every time? This would cause the build checks to run longer but would ensure we don't merge something broken. One potential issue with this is that those checks would run even for PRs with only config/documentation changes which don't require frontend/backend checks.

Metadata

Metadata

Assignees

Labels

1 - EnhancementImprovements or extensions to existing behaviortype:metaThe Issue is related to platform engineering, deployment, CI/CD, GitOps, or other DevOps aspects

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions