10
10
paths-ignore :
11
11
-" README.md"
12
12
13
-
14
13
permissions :
15
14
contents :read
16
15
@@ -19,36 +18,69 @@ jobs:
19
18
name :test
20
19
runs-on :${{ github.repository_owner == 'coder' && 'depot-macos-latest' || 'macos-latest'}}
21
20
steps :
21
+ -name :Harden Runner
22
+ uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
23
+ with :
24
+ egress-policy :audit
25
+
22
26
-name :Checkout
23
27
uses :actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
24
28
with :
25
29
fetch-depth :1
30
+
26
31
-name :Switch XCode Version
27
- uses :maxim-lobanov/setup-xcode@v1
32
+ uses :maxim-lobanov/setup-xcode@60606e260d2fc5762a71e64e74b2174e8ea3c8bd # v1.6.0
28
33
with :
29
- xcode-version :' 16.0.0'
30
- -run :|
31
- make test
34
+ # (ThomasK33): depot.dev does not yet support Xcode 16.1 or 16.2 GA, thus we're stuck with 16.0.0 for now.
35
+ # I've already reached out, so hopefully this comment will soon be obsolete.
36
+ xcode-version :" 16.0.0"
37
+
38
+ -name :Setup Nix
39
+ uses :./.github/actions/nix-devshell
40
+
41
+ -run :make test
42
+
32
43
format :
33
44
name :fmt
34
45
runs-on :${{ github.repository_owner == 'coder' && 'depot-macos-latest' || 'macos-latest'}}
35
46
steps :
47
+ -name :Harden Runner
48
+ uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
49
+ with :
50
+ egress-policy :audit
51
+
36
52
-name :Checkout
37
53
uses :actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
38
54
with :
39
55
fetch-depth :1
40
- -run :|
41
- make fmt
56
+
57
+ -name :Switch XCode Version
58
+ uses :maxim-lobanov/setup-xcode@60606e260d2fc5762a71e64e74b2174e8ea3c8bd # v1.6.0
59
+ with :
60
+ # (ThomasK33): depot.dev does not yet support Xcode 16.1 or 16.2 GA, thus we're stuck with 16.0.0 for now.
61
+ # I've already reached out, so hopefully this comment will soon be obsolete.
62
+ xcode-version :" 16.0.0"
63
+
64
+ -name :Setup Nix
65
+ uses :./.github/actions/nix-devshell
66
+
67
+ -run :make fmt
68
+
42
69
lint :
43
70
name :lint
44
71
runs-on :${{ github.repository_owner == 'coder' && 'depot-macos-latest' || 'macos-latest'}}
45
72
steps :
73
+ -name :Harden Runner
74
+ uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
75
+ with :
76
+ egress-policy :audit
77
+
46
78
-name :Checkout
47
79
uses :actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
48
80
with :
49
81
fetch-depth :1
50
- - name : Install Swiftlint
51
- run : |
52
- brew install swiftlint
53
- - run : |
54
- make lint
82
+
83
+ - name : Setup Nix
84
+ uses : ./.github/actions/nix-devshell
85
+
86
+ - run : make lint