IN-10344: Use spf-flattener on letsencrypt.org

letsencrypt · May 25, 2024 · f06bd14 · f06bd14
1 parent 37a474a
commit f06bd14
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/.github/workflows/check-spf-record.yaml b/.github/workflows/check-spf-record.yaml
@@ -24,3 +24,17 @@ jobs:
             echo "See 'Update SPF Record' Confluence page on how to update SPF record"
             exit 1
           fi
+      
+      - name: Check letsencrypt.org SPF
+        shell: bash
+        run: |
+          initialSPF="v=spf1 include:_spf.google.com ip4:23.178.112.0/24 ip4:66.133.109.36 ip4:64.78.149.164 include:spf.mandrillapp.com include:aspmx.pardot.com include:mail.zendesk.com include:shops.shopify.com include:_spf.intacct.com include:mg-spf.greenhouse.io -all"
+          warning=$(go run cmd/spf-flatten/main.go --domain "letsencrypt.org" --initialSPF "${initialSPF}" --logLevel warn)
+          if [ -z "${warning}" ]; then
+            echo "SPF record for letsencrypt.org has NOT changed"
+            exit 0
+          else
+            echo ${warning}
+            echo "See 'Update SPF Record' Confluence page on how to update SPF record"
+            exit 1
+          fi