Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Commitd0b5947

Browse files
Merge pull request#477 from github/hendrikvanantwerpen/vulns
Fix actions vulnerabilities
2 parents2f261d4 +3a596d8 commitd0b5947

10 files changed

+51
-21
lines changed

‎.github/CODEOWNERS

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
*@github/semantic-code
1+
*@github/semantic-code@github/blackbird

‎.github/workflows/ci.yml

Lines changed: 8 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,15 @@
11
name:Continuous integration
2+
23
on:
34
push:
45
branches:[main]
56
pull_request:
67
schedule:
78
-cron:"0 0 1,15 * *"
89

10+
permissions:
11+
contents:read
12+
913
# In the event that there is a new push to the ref, cancel any running jobs because there are now obsolete, and wasting resources.
1014
concurrency:
1115
group:${{ github.workflow }}-${{ github.ref }}
@@ -23,7 +27,7 @@ jobs:
2327

2428
steps:
2529
-name:Install Rust environment
26-
uses:hecrj/setup-rust-action@v1
30+
uses:hecrj/setup-rust-action@110f36749599534ca96628b82f52ae67e5d95a3c# v2
2731
with:
2832
rust-version:${{ matrix.rust }}
2933
-name:Install cargo-hack
@@ -75,7 +79,7 @@ jobs:
7579

7680
steps:
7781
-name:Install Rust environment
78-
uses:hecrj/setup-rust-action@v1
82+
uses:hecrj/setup-rust-action@110f36749599534ca96628b82f52ae67e5d95a3c# v2
7983
with:
8084
rust-version:${{ matrix.rust }}
8185
-name:Checkout code
@@ -116,7 +120,7 @@ jobs:
116120

117121
steps:
118122
-name:Install Rust environment
119-
uses:hecrj/setup-rust-action@v1
123+
uses:hecrj/setup-rust-action@110f36749599534ca96628b82f52ae67e5d95a3c# v2
120124
with:
121125
rust-version:${{ matrix.rust }}
122126
-name:Install cargo-hack
@@ -148,7 +152,7 @@ jobs:
148152

149153
steps:
150154
-name:Install Rust environment
151-
uses:hecrj/setup-rust-action@v1
155+
uses:hecrj/setup-rust-action@110f36749599534ca96628b82f52ae67e5d95a3c# v2
152156
with:
153157
rust-version:${{ matrix.rust }}
154158
-name:Cache dependencies

‎.github/workflows/perf.yml

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,14 @@
11
name:Performance testing
2+
23
on:
34
pull_request:
45
paths:
56
-'stack-graphs/**'
67

8+
permissions:
9+
contents:read
10+
pull-requests:write
11+
712
# In the event that there is a new push to the ref, cancel any running jobs because there are now obsolete, and wasting resources.
813
concurrency:
914
group:${{ github.workflow }}-${{ github.ref }}
@@ -79,7 +84,7 @@ jobs:
7984
BASE_SHA:${{ needs.changes.outputs.base-sha }}
8085
steps:
8186
-name:Install Rust environment
82-
uses:hecrj/setup-rust-action@v1
87+
uses:hecrj/setup-rust-action@110f36749599534ca96628b82f52ae67e5d95a3c# v2
8388
with:
8489
rust-version:stable
8590
-name:Cache Rust dependencies
@@ -148,7 +153,7 @@ jobs:
148153
HEAD_SHA:${{ needs.changes.outputs.head-sha }}
149154
steps:
150155
-name:Install Rust environment
151-
uses:hecrj/setup-rust-action@v1
156+
uses:hecrj/setup-rust-action@110f36749599534ca96628b82f52ae67e5d95a3c# v2
152157
with:
153158
rust-version:stable
154159
-name:Cache Rust dependencies

‎.github/workflows/publish-lsp-positions.yml

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,9 @@ on:
55
tags:
66
-lsp-positions-v*
77

8+
permissions:
9+
contents:write
10+
811
jobs:
912
publish-crate:
1013
runs-on:ubuntu-latest
@@ -14,7 +17,7 @@ jobs:
1417
CRATE_DIR:'./lsp-positions'
1518
steps:
1619
-name:Install Rust environment
17-
uses:hecrj/setup-rust-action@v1
20+
uses:hecrj/setup-rust-action@110f36749599534ca96628b82f52ae67e5d95a3c# v2
1821
-name:Checkout repository
1922
uses:actions/checkout@v4
2023
# TODO Verify the crate version matches the tag
@@ -38,7 +41,7 @@ jobs:
3841
-name:Checkout repository
3942
uses:actions/checkout@v4
4043
-name:Create GitHub release
41-
uses:ncipollo/release-action@v1
44+
uses:ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174#v1
4245
with:
4346
body:|
4447
Find more info on all releases at https://crates.io/crates/lsp-positions.

‎.github/workflows/publish-stack-graphs.yml

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,9 @@ on:
55
tags:
66
-stack-graphs-v*
77

8+
permissions:
9+
contents:write
10+
811
jobs:
912
publish-crate:
1013
runs-on:ubuntu-latest
@@ -14,7 +17,7 @@ jobs:
1417
CRATE_DIR:'./stack-graphs'
1518
steps:
1619
-name:Install Rust environment
17-
uses:hecrj/setup-rust-action@v1
20+
uses:hecrj/setup-rust-action@110f36749599534ca96628b82f52ae67e5d95a3c# v2
1821
-name:Checkout repository
1922
uses:actions/checkout@v4
2023
# TODO Verify the crate version matches the tag
@@ -38,7 +41,7 @@ jobs:
3841
-name:Checkout repository
3942
uses:actions/checkout@v4
4043
-name:Create GitHub release
41-
uses:ncipollo/release-action@v1
44+
uses:ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174#v1
4245
with:
4346
body:|
4447
Find more info on all releases at https://crates.io/crates/stack-graphs.

‎.github/workflows/publish-tree-sitter-stack-graphs-java.yml

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,9 @@ on:
55
tags:
66
-tree-sitter-stack-graphs-java-v*
77

8+
permissions:
9+
contents:write
10+
811
jobs:
912
publish-crate:
1013
runs-on:ubuntu-latest
@@ -14,7 +17,7 @@ jobs:
1417
CRATE_DIR:'./languages/tree-sitter-stack-graphs-java'
1518
steps:
1619
-name:Install Rust environment
17-
uses:hecrj/setup-rust-action@v1
20+
uses:hecrj/setup-rust-action@110f36749599534ca96628b82f52ae67e5d95a3c# v2
1821
-name:Checkout repository
1922
uses:actions/checkout@v4
2023
# TODO Verify the crate version matches the tag
@@ -38,7 +41,7 @@ jobs:
3841
-name:Checkout repository
3942
uses:actions/checkout@v4
4043
-name:Create GitHub release
41-
uses:ncipollo/release-action@v1
44+
uses:ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174#v1
4245
with:
4346
body:|
4447
Find more info on all releases at https://crates.io/crates/tree-sitter-stack-graphs-java.

‎.github/workflows/publish-tree-sitter-stack-graphs-javascript.yml

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,9 @@ on:
55
tags:
66
-tree-sitter-stack-graphs-javascript-v*
77

8+
permissions:
9+
contents:write
10+
811
jobs:
912
publish-crate:
1013
runs-on:ubuntu-latest
@@ -14,7 +17,7 @@ jobs:
1417
CRATE_DIR:'./languages/tree-sitter-stack-graphs-javascript'
1518
steps:
1619
-name:Install Rust environment
17-
uses:hecrj/setup-rust-action@v1
20+
uses:hecrj/setup-rust-action@110f36749599534ca96628b82f52ae67e5d95a3c# v2
1821
-name:Checkout repository
1922
uses:actions/checkout@v4
2023
# TODO Verify the crate version matches the tag
@@ -38,7 +41,7 @@ jobs:
3841
-name:Checkout repository
3942
uses:actions/checkout@v4
4043
-name:Create GitHub release
41-
uses:ncipollo/release-action@v1
44+
uses:ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174#v1
4245
with:
4346
body:|
4447
Find more info on all releases at https://crates.io/crates/tree-sitter-stack-graphs-javascript.

‎.github/workflows/publish-tree-sitter-stack-graphs-python.yml

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,9 @@ on:
55
tags:
66
-tree-sitter-stack-graphs-python-v*
77

8+
permissions:
9+
contents:write
10+
811
jobs:
912
publish-crate:
1013
runs-on:ubuntu-latest
@@ -14,7 +17,7 @@ jobs:
1417
CRATE_DIR:'./languages/tree-sitter-stack-graphs-python'
1518
steps:
1619
-name:Install Rust environment
17-
uses:hecrj/setup-rust-action@v1
20+
uses:hecrj/setup-rust-action@110f36749599534ca96628b82f52ae67e5d95a3c# v2
1821
-name:Checkout repository
1922
uses:actions/checkout@v4
2023
# TODO Verify the crate version matches the tag
@@ -38,7 +41,7 @@ jobs:
3841
-name:Checkout repository
3942
uses:actions/checkout@v4
4043
-name:Create GitHub release
41-
uses:ncipollo/release-action@v1
44+
uses:ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174#v1
4245
with:
4346
body:|
4447
Find more info on all releases at https://crates.io/crates/tree-sitter-stack-graphs-python.

‎.github/workflows/publish-tree-sitter-stack-graphs-typescript.yml

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,9 @@ on:
55
tags:
66
-tree-sitter-stack-graphs-typescript-v*
77

8+
permissions:
9+
contents:write
10+
811
jobs:
912
publish-crate:
1013
runs-on:ubuntu-latest
@@ -14,7 +17,7 @@ jobs:
1417
CRATE_DIR:'./languages/tree-sitter-stack-graphs-typescript'
1518
steps:
1619
-name:Install Rust environment
17-
uses:hecrj/setup-rust-action@v1
20+
uses:hecrj/setup-rust-action@110f36749599534ca96628b82f52ae67e5d95a3c# v2
1821
-name:Checkout repository
1922
uses:actions/checkout@v4
2023
# TODO Verify the crate version matches the tag
@@ -38,7 +41,7 @@ jobs:
3841
-name:Checkout repository
3942
uses:actions/checkout@v4
4043
-name:Create GitHub release
41-
uses:ncipollo/release-action@v1
44+
uses:ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174#v1
4245
with:
4346
body:|
4447
Find more info on all releases at https://crates.io/crates/tree-sitter-stack-graphs-typescript.

‎.github/workflows/publish-tree-sitter-stack-graphs.yml

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,9 @@ on:
55
tags:
66
-tree-sitter-stack-graphs-v*
77

8+
permissions:
9+
contents:write
10+
811
jobs:
912
publish-crate:
1013
runs-on:ubuntu-latest
@@ -14,7 +17,7 @@ jobs:
1417
CRATE_DIR:'./tree-sitter-stack-graphs'
1518
steps:
1619
-name:Install Rust environment
17-
uses:hecrj/setup-rust-action@v1
20+
uses:hecrj/setup-rust-action@110f36749599534ca96628b82f52ae67e5d95a3c# v2
1821
-name:Checkout repository
1922
uses:actions/checkout@v4
2023
# TODO Verify the crate version matches the tag
@@ -38,7 +41,7 @@ jobs:
3841
-name:Checkout repository
3942
uses:actions/checkout@v4
4043
-name:Create GitHub release
41-
uses:ncipollo/release-action@v1
44+
uses:ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174#v1
4245
with:
4346
body:|
4447
Find more info on all releases at https://crates.io/crates/tree-sitter-stack-graphs.

0 commit comments

Comments
 (0)
[8]ページ先頭
©2009-2025 Movatter.jp