What changed, and why it matters
This is a routine CI workflow fix that changes the directory path used by an automated translation-pushing job. It has no security relevance for users of Trezor devices or the firmware itself.
No security action needed. Treat as a normal CI maintenance change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates .github/workflows/crowdin-push.yml so that two steps use core/translations instead of translations. The workflow splits en.json and uploads sources to Crowdin. The old path was simply incorrect after a repository reorganization, causing the CI job to fail. No code running on devices, no secrets handling, and no trust boundaries are changed.
Changed components
.github/workflows/crowdin-push.ymlInspect captured patch +2 / −2
diff --git a/.github/workflows/crowdin-push.yml b/.github/workflows/crowdin-push.yml
index 5897bbd70..3d755ae70 100644
--- a/.github/workflows/crowdin-push.yml
+++ b/.github/workflows/crowdin-push.yml
@@ -28,14 +28,14 @@ jobs:
python-version: '3.11'
- name: Split en.json into per-layout files
- working-directory: translations
+ working-directory: core/translations
run: python crowdin.py split
- name: Upload sources to Crowdin
uses: crowdin/github-action@v2
with:
upload_sources: true
- config: translations/crowdin.yml
+ config: core/translations/crowdin.yml
env:
CROWDIN_PERSONAL_TOKEN: ${{ secrets.CROWDIN_PERSONAL_TOKEN }}
CROWDIN_PROJECT_ID: ${{ secrets.CROWDIN_PROJECT_ID }}
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.