Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/build_binaries.yml
Original file line number Diff line number Diff line change
Expand Up @@ -45,13 +45,13 @@ jobs:
timeout-minutes: 60
steps:
- name: Checkout repository
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
- name: Install Rust toolchain
uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
with:
inherit-toolchain: true
bins: cross
- uses: taiki-e/setup-cross-toolchain-action@3d9770ce98eb7dbcf378563182a5e8031165f75b
- uses: taiki-e/setup-cross-toolchain-action@12b7ad4acfa95a1476779d6c06699b96ec1691f8
with:
target: ${{ matrix.target }}
if: startsWith(matrix.os, 'ubuntu') && !contains(matrix.target, '-musl')
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/nightly.yml
Original file line number Diff line number Diff line change
@@ -1,14 +1,14 @@
name: nightly

Check warning on line 1 in .github/workflows/nightly.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

nightly.yml:1: overly broad permissions: default permissions used due to no permissions: block
on:
schedule:
- cron: '04 05 * * *'

jobs:
deny:

Check warning on line 7 in .github/workflows/nightly.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

nightly.yml:7: overly broad permissions: default permissions used due to no permissions: block
name: cargo deny --all-features check
runs-on: ubuntu-22.04
steps:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
- uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
with:
inherit-toolchain: true
Expand All @@ -16,5 +16,5 @@
- run: sudo apt-get install libpam0g-dev
- run: cargo deny --all-features check

postsubmit:

Check warning on line 19 in .github/workflows/nightly.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

nightly.yml:19: overly broad permissions: default permissions used due to no permissions: block
uses: ./.github/workflows/presubmit.yml
10 changes: 5 additions & 5 deletions .github/workflows/presubmit.yml
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
name: presubmit

Check warning on line 1 in .github/workflows/presubmit.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

presubmit.yml:1: overly broad permissions: default permissions used due to no permissions: block
on: [pull_request, workflow_call, workflow_dispatch]

jobs:
test:

Check warning on line 5 in .github/workflows/presubmit.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

presubmit.yml:5: overly broad permissions: default permissions used due to no permissions: block
name: cargo test --all-features (${{ matrix.os }})
strategy:
fail-fast: false
Expand All @@ -10,7 +10,7 @@
os: [ubuntu-22.04, macos-latest]
runs-on: ${{ matrix.os }}
steps:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
- uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
with:
inherit-toolchain: true
Expand All @@ -23,7 +23,7 @@
- run: SHPOOL_LEAVE_TEST_LOGS=true RUST_BACKTRACE=full cargo test --all-features
- name: Archive Logs
if: always()
uses: actions/upload-artifact@v7

Check failure on line 26 in .github/workflows/presubmit.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 26 in .github/workflows/presubmit.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

presubmit.yml:26: unpinned action reference: action is not pinned to a hash (required by blanket policy)
id: artifact-upload-step
with:
name: test-logs-${{ matrix.os }}
Expand All @@ -36,7 +36,7 @@
# name: cargo +nightly miri test
# runs-on: ubuntu-22.04
# steps:
# - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
# - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
# - uses: moonrepo/setup-rust@b8edcc56aab474d90c7cf0bb8beeaf8334c15e9f
# with:
# components: miri
Expand All @@ -44,11 +44,11 @@
# - run: sudo apt-get install zsh fish
# - run: MIRIFLAGS="-Zmiri-disable-isolation" cargo +nightly miri test

rustfmt:

Check warning on line 47 in .github/workflows/presubmit.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

presubmit.yml:47: overly broad permissions: default permissions used due to no permissions: block
name: cargo +nightly fmt -- --check
runs-on: ubuntu-22.04
steps:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
- uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
with:
components: rustfmt
Expand All @@ -56,11 +56,11 @@
- run: sudo apt-get install libpam0g-dev
- run: cargo +nightly fmt -- --check

cranky:

Check warning on line 59 in .github/workflows/presubmit.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

presubmit.yml:59: overly broad permissions: default permissions used due to no permissions: block
name: cargo +nightly cranky --all-targets -- -D warnings
runs-on: ubuntu-22.04
steps:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
- uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
with:
components: clippy
Expand All @@ -69,11 +69,11 @@
- run: sudo apt-get install zsh fish libpam0g-dev
- run: cargo +nightly cranky --all-targets -- -D warnings

deny:

Check warning on line 72 in .github/workflows/presubmit.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

presubmit.yml:72: overly broad permissions: default permissions used due to no permissions: block
name: cargo deny --all-features check licenses
runs-on: ubuntu-22.04
steps:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
- name: Install Rust toolchain
uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
with:
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/publish.yml
Original file line number Diff line number Diff line change
Expand Up @@ -17,21 +17,21 @@
# Generating a GitHub token, so that PRs and tags created by
# the release-plz-action can trigger actions workflows.
- name: Generate GitHub token
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1

Check failure on line 20 in .github/workflows/publish.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

github-app

publish.yml:20: dangerous use of GitHub App tokens: app token inherits blanket installation permissions
id: generate-token
with:
app-id: ${{ secrets.RELEASE_PLZ_APP_ID }} # <-- GitHub App ID secret name
private-key: ${{ secrets.RELEASE_PLZ_APP_PRIVATE_KEY }} # <-- GitHub App private key secret name
- name: Checkout repository
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
with:
fetch-depth: 0
- name: Install Rust toolchain
uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
with:
bins: cross
- name: Run release-plz
uses: MarcoIeni/release-plz-action@e8792575c7f2366cf6ff3ccc33ead9ace5b691c7
uses: MarcoIeni/release-plz-action@2eb1d8bcb770b4c48ccfaad919734b38b51958c9
env:
GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
Loading