From 944c0e6bd2464e25f2fa7e626eeed70603e6c240 Mon Sep 17 00:00:00 2001 From: MK Date: Wed, 16 Sep 2026 14:44:38 +0800 Subject: [PATCH] fix(ci): temporarily skip sfw blocking checks --- .github/workflows/test.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index db2f689..555fa70 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -706,6 +706,9 @@ jobs: run: vp exec node -e "console.log(require('is-odd')(3))" test-sfw-blocks-malicious: + # Temporarily skip while Socket alert lookups fail. Restore in #161: + # https://github.com/voidzero-dev/setup-vp/issues/161 + if: ${{ false }} # Verifies sfw actually intercepts a known-malicious package, not just # that it wraps the install. Uses `lodahs` (lodash typosquat), the same # canary SocketDev's own workflows use: @@ -830,6 +833,9 @@ jobs: run: vp exec node -e "console.log(require('is-odd')(3))" - name: Assert composed sfw blocks malicious package (lodahs) + # Temporarily skip while Socket alert lookups fail. Restore in #161: + # https://github.com/voidzero-dev/setup-vp/issues/161 + if: ${{ false }} shell: bash working-directory: ${{ runner.temp }}/test-project # Proves the composition path actually enforces, not just that sfw is