From 004456766c67600c5df30ae15cdc83f51436fbde Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jorge=20Mart=C3=ADn?= Date: Tue, 26 Dec 2023 09:58:19 +0100 Subject: [PATCH 1/2] Ignore tracker count retrieved by exodus job so the report can be created --- .github/workflows/build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 942965041a7..7857678c307 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -79,7 +79,7 @@ jobs: - name: Execute exodus-standalone uses: docker://exodusprivacy/exodus-standalone:latest with: - args: /github/workspace/gplay/release/vector-gplay-universal-release-unsigned.apk -j -o /github/workspace/exodus.json + args: /github/workspace/gplay/release/vector-gplay-universal-release-unsigned.apk -j -o /github/workspace/exodus.json -e 0 - name: Upload exodus json report uses: actions/upload-artifact@v3 with: From a0518c7dddfff3a4500a5e9d18b951327e415e20 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jorge=20Mart=C3=ADn?= Date: Tue, 26 Dec 2023 10:33:09 +0100 Subject: [PATCH 2/2] Ignore Sentry, since it's a known and optional tracker --- .github/workflows/build.yml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 7857678c307..116a604c103 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -79,6 +79,7 @@ jobs: - name: Execute exodus-standalone uses: docker://exodusprivacy/exodus-standalone:latest with: + # Don't fail when finding trackers so they can be reported later args: /github/workspace/gplay/release/vector-gplay-universal-release-unsigned.apk -j -o /github/workspace/exodus.json -e 0 - name: Upload exodus json report uses: actions/upload-artifact@v3 @@ -87,4 +88,9 @@ jobs: path: | exodus.json - name: Check for trackers - run: "jq -e '.trackers == []' exodus.json > /dev/null || { echo '::error static analysis identified user tracking library' ; exit 1; }" + env: + SENTRY_ID: 447 + # Should only contain a Sentry item + run: | + TRACKER_IDS=$(jq ".trackers[] | .id" exodus.json) + [ $TRACKER_IDS = ${{ env.SENTRY_ID }} ] || { echo '::error static analysis identified user tracking library' ; exit 1; }