diff options
| author | Egor Tensin <egor@tensin.name> | 2026-10-21 11:36:00 +0300 |
|---|---|---|
| committer | Egor Tensin <egor@tensin.name> | 2026-10-21 11:36:23 +0300 |
| commit | 863f7703e2da5cfe3ac44961829ad1c65f6a4037 (patch) | |
| tree | 4bafacf8d2954eb8341070579b0c9f1e5ef12663 | |
| parent | dependabot: check git submodules (diff) | |
| download | linux-status-863f7703e2da5cfe3ac44961829ad1c65f6a4037.tar.gz linux-status-863f7703e2da5cfe3ac44961829ad1c65f6a4037.zip | |
fix zizmor warnings & some linting
| -rw-r--r-- | .github/dependabot.yml | 6 | ||||
| -rw-r--r-- | .github/workflows/ci.yml | 18 |
2 files changed, 18 insertions, 6 deletions
diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5f2637a..6542be1 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,13 +4,19 @@ updates: directory: / schedule: interval: weekly + cooldown: + default-days: 7 - package-ecosystem: github-actions directory: / schedule: interval: weekly target-branch: debian + cooldown: + default-days: 7 - package-ecosystem: gitsubmodule directories: - '**/*' schedule: interval: weekly + cooldown: + default-days: 7 diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index b595609..305df3c 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -4,6 +4,8 @@ on: push: workflow_dispatch: +permissions: {} + jobs: lint: runs-on: ubuntu-latest @@ -12,6 +14,8 @@ jobs: steps: - name: Checkout uses: actions/checkout@v7 + with: + persist-credentials: false - name: Set up Python uses: actions/setup-python@v7 with: @@ -31,16 +35,17 @@ jobs: - '3.14' - '3.x' runs-on: ubuntu-latest - name: 'Python ${{ matrix.python-version }}' + name: Python ${{ matrix.python-version }} steps: - name: Checkout uses: actions/checkout@v7 with: + persist-credentials: false submodules: recursive - name: Set up Python uses: actions/setup-python@v7 with: - python-version: '${{ matrix.python-version }}' + python-version: ${{ matrix.python-version }} - name: Run tests as root run: sudo ./test/runner/harness - name: Run tests @@ -57,9 +62,8 @@ jobs: && !startsWith(github.ref, 'refs/tags/debian/') container: image: archlinux:base-devel - env: - SSH_KEY: | - ${{ secrets.SSH_KEY }} + permissions: + contents: write steps: # This step must be done before actions/checkout. From the latter's # output: @@ -72,9 +76,11 @@ jobs: - name: Checkout uses: actions/checkout@v7 with: + persist-credentials: true ref: aur submodules: recursive - token: '${{ secrets.GH_TOKEN }}' - name: Run maintenance + env: + SSH_KEY: ${{ secrets.SSH_KEY }} run: | make -C "$GITHUB_WORKSPACE" ci |