Skip to content
Closed
Show file tree
Hide file tree
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@
runs-on: ubuntu-latest

steps:
- uses: actions/checkout@v6.0.1
- uses: actions/checkout@v6.0.2

Check failure

Code scanning / zizmor

unpinned action reference Error

unpinned action reference

Check notice

Code scanning / zizmor

credential persistence through GitHub Actions artifacts Note

credential persistence through GitHub Actions artifacts
- name: Set up Python
uses: actions/setup-python@v6
with:
Expand All @@ -35,7 +35,7 @@
- name: Build a binary wheel and a source tarball
run: python3 -m build
- name: Store the distribution packages
uses: actions/upload-artifact@v6
uses: actions/upload-artifact@v7

Check failure

Code scanning / zizmor

unpinned action reference Error

unpinned action reference
with:
name: python-package-distributions
path: dist/
Expand All @@ -53,7 +53,7 @@
id-token: write # IMPORTANT: mandatory for trusted publishing
steps:
- name: Download all the dists
uses: actions/download-artifact@v7
uses: actions/download-artifact@v8

Check failure

Code scanning / zizmor

unpinned action reference Error

unpinned action reference
with:
name: python-package-distributions
path: dist/
Expand All @@ -74,7 +74,7 @@

steps:
- name: Download all the dists
uses: actions/download-artifact@v7
uses: actions/download-artifact@v8

Check failure

Code scanning / zizmor

unpinned action reference Error

unpinned action reference
with:
name: python-package-distributions
path: dist/
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/test_release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -62,7 +62,7 @@
runs-on: ubuntu-latest

steps:
- uses: actions/checkout@v6.0.1
- uses: actions/checkout@v6.0.2

Check failure

Code scanning / zizmor

unpinned action reference Error test

unpinned action reference

Check notice

Code scanning / zizmor

credential persistence through GitHub Actions artifacts Note test

credential persistence through GitHub Actions artifacts
- name: Set up Python
uses: actions/setup-python@v6
with:
Expand All @@ -75,7 +75,7 @@
DEV_VERSION: ${{needs.create-dev-version.outputs.dev_version}}
run: ${{ env.DEV_VERSION_ENV_KEY }}="${{ env.DEV_VERSION }}" python3 -m build
- name: Store the distribution packages
uses: actions/upload-artifact@v6
uses: actions/upload-artifact@v7

Check failure

Code scanning / zizmor

unpinned action reference Error test

unpinned action reference
with:
name: python-package-distributions
path: dist/
Expand All @@ -95,7 +95,7 @@

steps:
- name: Download all the dists
uses: actions/download-artifact@v7
uses: actions/download-artifact@v8

Check failure

Code scanning / zizmor

unpinned action reference Error test

unpinned action reference
with:
name: python-package-distributions
path: dist/
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/zizmor.yml
Original file line number Diff line number Diff line change
Expand Up @@ -21,10 +21,10 @@ jobs:
actions: read # only needed for private repos
steps:
- name: Checkout repository
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false

- name: Run zizmor 🌈
uses: zizmorcore/zizmor-action@e639db99335bc9038abc0e066dfcd72e23d26fb4 # v0.3.0
uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2