mirror of
https://github.com/zama-ai/tfhe-rs.git
synced 2026-01-06 21:34:05 -05:00
36b6376cc4
Bumps [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions) from 4.0.0 to 4.0.1.
- [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases)
- [Commits](9e9574ef04...6124774845)
---
updated-dependencies:
- dependency-name: zgosalvez/github-actions-ensure-sha-pinned-actions
dependency-version: 4.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
58 lines
1.9 KiB
YAML
58 lines
1.9 KiB
YAML
# Lint and check CI
|
|
name: ci_lint
|
|
|
|
on:
|
|
pull_request:
|
|
|
|
env:
|
|
ACTIONLINT_VERSION: 1.7.7
|
|
ACTIONLINT_CHECKSUM: "023070a287cd8cccd71515fedc843f1985bf96c436b7effaecce67290e7e0757"
|
|
CHECKOUT_TOKEN: ${{ secrets.REPO_CHECKOUT_TOKEN || secrets.GITHUB_TOKEN }}
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
# zizmor: ignore[concurrency-limits] only Zama organization members can trigger this workflow (via manual approval for PR from forks)
|
|
|
|
jobs:
|
|
lint-check:
|
|
name: ci_lint/lint-check (bpr)
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout tfhe-rs
|
|
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
|
|
with:
|
|
persist-credentials: 'false'
|
|
token: ${{ env.CHECKOUT_TOKEN }}
|
|
|
|
- name: Get actionlint
|
|
run: |
|
|
wget "https://github.com/rhysd/actionlint/releases/download/v${ACTIONLINT_VERSION}/actionlint_${ACTIONLINT_VERSION}_linux_amd64.tar.gz"
|
|
echo "${ACTIONLINT_CHECKSUM} actionlint_${ACTIONLINT_VERSION}_linux_amd64.tar.gz" > checksum
|
|
sha256sum -c checksum
|
|
tar -xf actionlint_"${ACTIONLINT_VERSION}"_linux_amd64.tar.gz actionlint
|
|
ln -s "$(pwd)/actionlint" /usr/local/bin/
|
|
|
|
- name: Lint workflows
|
|
run: |
|
|
make lint_workflow
|
|
|
|
- name: Get Zimzor version to use
|
|
id: get_zizmor
|
|
run: |
|
|
echo "version=$(make zizmor_version)" >> "${GITHUB_OUTPUT}"
|
|
|
|
- name: Check workflows security
|
|
uses: zizmorcore/zizmor-action@e639db99335bc9038abc0e066dfcd72e23d26fb4 # v0.3.0
|
|
with:
|
|
advanced-security: 'false' # Print results directly in logs
|
|
persona: pedantic
|
|
version: ${{ steps.get_zizmor.outputs.version }}
|
|
|
|
- name: Ensure SHA pinned actions
|
|
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@6124774845927d14c601359ab8138699fa5b70c3 # v4.0.1
|
|
with:
|
|
allowlist: |
|
|
slsa-framework/slsa-github-generator
|
|
./
|