diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 942965041a..116a604c10 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -79,7 +79,8 @@ jobs: - name: Execute exodus-standalone uses: docker://exodusprivacy/exodus-standalone:latest with: - args: /github/workspace/gplay/release/vector-gplay-universal-release-unsigned.apk -j -o /github/workspace/exodus.json + # Don't fail when finding trackers so they can be reported later + args: /github/workspace/gplay/release/vector-gplay-universal-release-unsigned.apk -j -o /github/workspace/exodus.json -e 0 - name: Upload exodus json report uses: actions/upload-artifact@v3 with: @@ -87,4 +88,9 @@ jobs: path: | exodus.json - name: Check for trackers - run: "jq -e '.trackers == []' exodus.json > /dev/null || { echo '::error static analysis identified user tracking library' ; exit 1; }" + env: + SENTRY_ID: 447 + # Should only contain a Sentry item + run: | + TRACKER_IDS=$(jq ".trackers[] | .id" exodus.json) + [ $TRACKER_IDS = ${{ env.SENTRY_ID }} ] || { echo '::error static analysis identified user tracking library' ; exit 1; }