wip

.github/workflows/default.yml

@@ -17,7 +17,7 @@ jobs:
         uses: actions/checkout@v2
       - name: Validate changed files
         if: github.event_name == 'pull_request' && !contains(github.event.pull_request.labels.*.name, 'allow sdk change')
-        run: ./.github/workflows/validate_changed_files.sh `git diff --name-only "$GITHUB_BASE_REF..$GITHUB_SHA"`
+        run: ./.github/workflows/validate_changed_files.sh
       - uses: bazelbuild/setup-bazelisk@v1
       - name: Bazel caches
         uses: actions/cache@v2

.github/workflows/validate_changed_files.sh

@@ -8,7 +8,18 @@ VALID_FILE_PATHS=('pkg/plugin/sdk/v1alpha2') # Array of filepaths that are allow
 # by default the only local branch will be pull/PR#/merge
 # fetch only the latest commit from the 2 branches in question to avoid fetching the entire repo which could be costly
 
-for file in "$@"; do
+pull_number=$(jq --raw-output .pull_request.number "$GITHUB_EVENT_PATH")
+
+git fetch --depth 1 origin ${GITHUB_BASE_REF}
+git fetch --depth 1 origin refs/pull/${pull_number}/head.
+
+main_head=`git rev-parse --short origin/${GITHUB_BASE_REF}`
+pr_head=${GITHUB_SHA}
+
+echo "$main_head ... $pr_head"
+
+git diff --name-only ${main_head}..${pr_head} | while read -r file; do
+    echo "FILE: $file"
 
     # check if filepath matches a valid path. If so move to the next change
     for valid_path in "${VALID_FILE_PATHS[@]}"; do