Updating GHES workflows
This commit is contained in:
+1
-1
@@ -17,7 +17,7 @@ jobs:
|
|||||||
|
|
||||||
- name: Set up GNAT toolchain
|
- name: Set up GNAT toolchain
|
||||||
run: >
|
run: >
|
||||||
sudo apt-get update &&
|
sudo apt-get update &&
|
||||||
sudo apt-get install gnat gprbuild
|
sudo apt-get install gnat gprbuild
|
||||||
|
|
||||||
- name: Build
|
- name: Build
|
||||||
|
|||||||
+2
-2
@@ -31,7 +31,7 @@ jobs:
|
|||||||
|
|
||||||
- name: Test
|
- name: Test
|
||||||
working-directory: ${{github.workspace}}/build
|
working-directory: ${{github.workspace}}/build
|
||||||
# Execute tests defined by the CMake configuration.
|
# Execute tests defined by the CMake configuration.
|
||||||
# See https://cmake.org/cmake/help/latest/manual/ctest.1.html for more detail
|
# See https://cmake.org/cmake/help/latest/manual/ctest.1.html for more detail
|
||||||
run: ctest -C ${{env.BUILD_TYPE}}
|
run: ctest -C ${{env.BUILD_TYPE}}
|
||||||
|
|
||||||
|
|||||||
@@ -3,10 +3,10 @@
|
|||||||
# separate terms of service, privacy policy, and support
|
# separate terms of service, privacy policy, and support
|
||||||
# documentation.
|
# documentation.
|
||||||
|
|
||||||
# This workflow lets you compile your Go project using a SLSA3 compliant builder.
|
# This workflow lets you compile your Go project using a SLSA3 compliant builder.
|
||||||
# This workflow will generate a so-called "provenance" file describing the steps
|
# This workflow will generate a so-called "provenance" file describing the steps
|
||||||
# that were performed to generate the final binary.
|
# that were performed to generate the final binary.
|
||||||
# The project is an initiative of the OpenSSF (openssf.org) and is developed at
|
# The project is an initiative of the OpenSSF (openssf.org) and is developed at
|
||||||
# https://github.com/slsa-framework/slsa-github-generator.
|
# https://github.com/slsa-framework/slsa-github-generator.
|
||||||
# The provenance file can be verified using https://github.com/slsa-framework/slsa-verifier.
|
# The provenance file can be verified using https://github.com/slsa-framework/slsa-verifier.
|
||||||
# For more information about SLSA and how it improves the supply-chain, visit slsa.dev.
|
# For more information about SLSA and how it improves the supply-chain, visit slsa.dev.
|
||||||
@@ -21,7 +21,7 @@ permissions: read-all
|
|||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
# ========================================================================================================================================
|
# ========================================================================================================================================
|
||||||
# Prerequesite: Create a .slsa-goreleaser.yml in the root directory of your project.
|
# Prerequesite: Create a .slsa-goreleaser.yml in the root directory of your project.
|
||||||
# See format in https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/go/README.md#configuration-file
|
# See format in https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/go/README.md#configuration-file
|
||||||
#=========================================================================================================================================
|
#=========================================================================================================================================
|
||||||
build:
|
build:
|
||||||
|
|||||||
+4
-4
@@ -13,15 +13,15 @@ jobs:
|
|||||||
|
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v3
|
- uses: actions/checkout@v3
|
||||||
|
|
||||||
- name: configure
|
- name: configure
|
||||||
run: ./configure
|
run: ./configure
|
||||||
|
|
||||||
- name: Install dependencies
|
- name: Install dependencies
|
||||||
run: make
|
run: make
|
||||||
|
|
||||||
- name: Run check
|
- name: Run check
|
||||||
run: make check
|
run: make check
|
||||||
|
|
||||||
- name: Run distcheck
|
- name: Run distcheck
|
||||||
run: make distcheck
|
run: make distcheck
|
||||||
|
|||||||
+1
-1
@@ -13,7 +13,7 @@ jobs:
|
|||||||
strategy:
|
strategy:
|
||||||
matrix:
|
matrix:
|
||||||
node-version: [14.x, 16.x, 18.x]
|
node-version: [14.x, 16.x, 18.x]
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v3
|
- uses: actions/checkout@v3
|
||||||
|
|
||||||
|
|||||||
+1
-1
@@ -13,7 +13,7 @@ jobs:
|
|||||||
strategy:
|
strategy:
|
||||||
matrix:
|
matrix:
|
||||||
node-version: [14.x, 16.x, 18.x]
|
node-version: [14.x, 16.x, 18.x]
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v3
|
- uses: actions/checkout@v3
|
||||||
|
|
||||||
|
|||||||
+1
-1
@@ -13,7 +13,7 @@ jobs:
|
|||||||
strategy:
|
strategy:
|
||||||
matrix:
|
matrix:
|
||||||
node-version: [14.x, 16.x, 18.x]
|
node-version: [14.x, 16.x, 18.x]
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v3
|
- uses: actions/checkout@v3
|
||||||
|
|
||||||
|
|||||||
@@ -48,11 +48,11 @@ jobs:
|
|||||||
# If you wish to specify custom queries, you can do so here or in a config file.
|
# If you wish to specify custom queries, you can do so here or in a config file.
|
||||||
# By default, queries listed here will override any specified in a config file.
|
# By default, queries listed here will override any specified in a config file.
|
||||||
# Prefix the list here with "+" to use these queries and those in the config file.
|
# Prefix the list here with "+" to use these queries and those in the config file.
|
||||||
|
|
||||||
# Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
|
# Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
|
||||||
# queries: security-extended,security-and-quality
|
# queries: security-extended,security-and-quality
|
||||||
|
|
||||||
|
|
||||||
# Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
|
# Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
|
||||||
# If this step fails, then you should remove it and run the build manually (see below)
|
# If this step fails, then you should remove it and run the build manually (see below)
|
||||||
- name: Autobuild
|
- name: Autobuild
|
||||||
@@ -61,7 +61,7 @@ jobs:
|
|||||||
# ℹ️ Command-line programs to run using the OS shell.
|
# ℹ️ Command-line programs to run using the OS shell.
|
||||||
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
|
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
|
||||||
|
|
||||||
# If the Autobuild fails above, remove it and uncomment the following three lines.
|
# If the Autobuild fails above, remove it and uncomment the following three lines.
|
||||||
# modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
|
# modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
|
||||||
|
|
||||||
# - run: |
|
# - run: |
|
||||||
|
|||||||
@@ -69,13 +69,13 @@ jobs:
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
' 1> gh_response.json
|
' 1> gh_response.json
|
||||||
|
|
||||||
DETEKT_RELEASE_SHA=$(jq --raw-output '.data.repository.release.releaseAssets.tagCommit.oid' gh_response.json)
|
DETEKT_RELEASE_SHA=$(jq --raw-output '.data.repository.release.releaseAssets.tagCommit.oid' gh_response.json)
|
||||||
if [ $DETEKT_RELEASE_SHA != "37f0a1d006977512f1f216506cd695039607c3e5" ]; then
|
if [ $DETEKT_RELEASE_SHA != "37f0a1d006977512f1f216506cd695039607c3e5" ]; then
|
||||||
echo "Release tag doesn't match expected commit SHA"
|
echo "Release tag doesn't match expected commit SHA"
|
||||||
exit 1
|
exit 1
|
||||||
fi
|
fi
|
||||||
|
|
||||||
DETEKT_DOWNLOAD_URL=$(jq --raw-output '.data.repository.release.releaseAssets.nodes[0].downloadUrl' gh_response.json)
|
DETEKT_DOWNLOAD_URL=$(jq --raw-output '.data.repository.release.releaseAssets.nodes[0].downloadUrl' gh_response.json)
|
||||||
echo "::set-output name=download_url::$DETEKT_DOWNLOAD_URL"
|
echo "::set-output name=download_url::$DETEKT_DOWNLOAD_URL"
|
||||||
|
|
||||||
|
|||||||
@@ -25,7 +25,7 @@ jobs:
|
|||||||
permissions:
|
permissions:
|
||||||
contents: read
|
contents: read
|
||||||
security-events: write
|
security-events: write
|
||||||
actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
|
actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout code
|
- name: Checkout code
|
||||||
uses: actions/checkout@v3
|
uses: actions/checkout@v3
|
||||||
@@ -39,7 +39,7 @@ jobs:
|
|||||||
run: npx eslint .
|
run: npx eslint .
|
||||||
--config .eslintrc.js
|
--config .eslintrc.js
|
||||||
--ext .js,.jsx,.ts,.tsx
|
--ext .js,.jsx,.ts,.tsx
|
||||||
--format @microsoft/eslint-formatter-sarif
|
--format @microsoft/eslint-formatter-sarif
|
||||||
--output-file eslint-results.sarif
|
--output-file eslint-results.sarif
|
||||||
continue-on-error: true
|
continue-on-error: true
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user