Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump checkout action, use commit tags for security reason #625

Merged
merged 1 commit into from
Feb 13, 2025
+69 −46
Merged

Bump checkout action, use commit tags for security reason #625

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
115 changes: 69 additions & 46 deletions .github/workflows/build-check.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,116 +10,139 @@ jobs:
docker-pull:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- run: make docker-pull
- name: Checkout Repo
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Run docker pull
run: make docker-pull

gen-cpp:
needs: docker-pull
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- run: make gen-cpp
- name: Checkout Repo
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Generate C++
run: make gen-cpp

gen-csharp:
needs: docker-pull
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- run: make gen-csharp
- name: Checkout Repo
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Generate C#
run: make gen-csharp

gen-go:
needs: docker-pull
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- run: make gen-go
- name: Checkout Repo
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Generate GoLang
run: make gen-go

gen-java:
needs: docker-pull
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- run: make gen-java
- name: Checkout Repo
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Generate Java
run: make gen-java

gen-objc:
needs: docker-pull
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- run: make gen-objc
- name: Checkout Repo
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Generate ObjC
run: make gen-objc

gen-openapi:
needs: docker-pull
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- run: make gen-openapi
- name: Checkout Repo
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Generate OpenAPI
run: make gen-openapi

gen-php:
needs: docker-pull
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- run: make gen-php
- name: Checkout Repo
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Generate PhP
run: make gen-php

gen-python:
needs: docker-pull
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- run: make gen-python
- name: Checkout Repo
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Generate Python
run: make gen-python

gen-ruby:
needs: docker-pull
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- run: make gen-ruby
- name: Checkout Repo
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Generate Ruby
run: make gen-ruby

gen-kotlin:
needs: docker-pull
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- run: make gen-kotlin
- name: Checkout Repo
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Generate Kotlin
run: make gen-kotlin

breaking-change:
needs: docker-pull
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
# breaking-change checks against last published release which is determined
# using the last published tag
- name: Get tags
run: git fetch --tags origin
- name: Run make breaking-change with json output to annotate PR
# Formats JSON output into Github workflow commands
# https://docs.github.com/en/actions/using-workflows/workflow-commands-for-github-actions#setting-an-error-message
run: >
BUF_FLAGS="--error-format json" make -s breaking-change
| jq -rs '.[] | "::error file=\(.path),line=\(.start_line),endLine=\(.end_line),title=Buf detected breaking change \(.type)::\(.message)"'
; (exit ${PIPESTATUS[0]})
- name: Checkout Repo
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
# breaking-change checks against last published release which is determined
# using the last published tag
- name: Get tags
run: git fetch --tags origin
- name: Run make breaking-change with json output to annotate PR
# Formats JSON output into Github workflow commands
# https://docs.github.com/en/actions/using-workflows/workflow-commands-for-github-actions#setting-an-error-message
run: >
BUF_FLAGS="--error-format json" make -s breaking-change
| jq -rs '.[] | "::error file=\(.path),line=\(.start_line),endLine=\(.end_line),title=Buf detected breaking change \(.type)::\(.message)"'
; (exit ${PIPESTATUS[0]})

markdown-link-check:
runs-on: ubuntu-latest
steps:
- name: check out code
uses: actions/checkout@v2
- name: Checkout Repo
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

- name: install dependencies
run: npm install
- name: install dependencies
run: npm install

- name: run markdown-link-check
run: make markdown-link-check
- name: run markdown-link-check
run: make markdown-link-check

markdownlint:
runs-on: ubuntu-latest
steps:
- name: check out code
uses: actions/checkout@v2
- name: Checkout Repo
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

- name: install dependencies
run: npm install
- name: install dependencies
run: npm install

- name: run markdownlint
run: make markdownlint
- name: run markdownlint
run: make markdownlint