yggdrasil/ring
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

CI/CD: Use my own fork of (third-party) GitHub Actions.

Browse Source 
This is a step towards implementing the GitHub security hardening advice.

```
$ sed -ri 's|(uses: +)([^/]+)/([^@])|\1briansmith/\2-\3|g' .github/workflows/ci.yml
$ grep "uses:" .github/workflows/ci.yml | sort | uniq
      - uses: briansmith/actions-cache@v2
      - uses: briansmith/actions-checkout@v2
      - uses: briansmith/actions-rs-toolchain@v1
      - uses: briansmith/codecov-codecov-action@v1
```
This commit is contained in:
Brian Smith 2021-04-26 17:06:58 -07:00
parent f3d8b52f53
commit 0c69150e35
1 changed files with 21 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

42
.github/workflows/ci.yml vendored
View File

@ -12,12 +12,12 @@ jobs:
runs-on: ubuntu-18.04
steps:
- uses: actions-rs/toolchain@v1
- uses: briansmith/actions-rs-toolchain@v1
with:
toolchain: stable
profile: minimal
components: rustfmt
- uses: actions/checkout@v2
- uses: briansmith/actions-checkout@v2
with:
persist-credentials: false
- run: cargo fmt --all -- --check
@ -29,13 +29,13 @@ jobs:
runs-on: ubuntu-18.04
steps:
- uses: actions-rs/toolchain@v1
- uses: briansmith/actions-rs-toolchain@v1
with:
toolchain: stable
profile: minimal
components: clippy
- uses: actions/checkout@v2
- uses: briansmith/actions-checkout@v2
with:
persist-credentials: false
@ -48,12 +48,12 @@ jobs:
runs-on: ubuntu-18.04
steps:
- uses: actions-rs/toolchain@v1
- uses: briansmith/actions-rs-toolchain@v1
with:
toolchain: stable
profile: minimal
- uses: actions/cache@v2
- uses: briansmith/actions-cache@v2
with:
path: |
~/.cargo/bin/cargo-audit
@ -63,7 +63,7 @@ jobs:
- run: cargo install cargo-audit --vers "0.13.1"
- uses: actions/checkout@v2
- uses: briansmith/actions-checkout@v2
with:
persist-credentials: false
@ -78,12 +78,12 @@ jobs:
runs-on: ubuntu-18.04
steps:
- uses: actions-rs/toolchain@v1
- uses: briansmith/actions-rs-toolchain@v1
with:
toolchain: stable
profile: minimal
- uses: actions/cache@v2
- uses: briansmith/actions-cache@v2
with:
path: |
~/.cargo/bin/cargo-deny
@ -93,7 +93,7 @@ jobs:
- run: cargo install cargo-deny --vers "0.8.4"
- uses: actions/checkout@v2
- uses: briansmith/actions-checkout@v2
with:
persist-credentials: false
@ -117,13 +117,13 @@ jobs:
- target: x86_64-unknown-linux-gnu
steps:
- uses: actions-rs/toolchain@v1
- uses: briansmith/actions-rs-toolchain@v1
with:
override: true
target: ${{ matrix.target }}
toolchain: ${{ matrix.rust_channel }}
- uses: actions/checkout@v2
- uses: briansmith/actions-checkout@v2
with:
persist-credentials: false
@ -137,13 +137,13 @@ jobs:
runs-on: windows-latest
steps:
- uses: actions/checkout@v2
- uses: briansmith/actions-checkout@v2
with:
persist-credentials: false
- run: powershell -ExecutionPolicy Bypass ./mk/install-build-tools.ps1
- uses: actions-rs/toolchain@v1
- uses: briansmith/actions-rs-toolchain@v1
with:
toolchain: stable
profile: minimal
@ -278,7 +278,7 @@ jobs:
- if: ${{ contains(matrix.host_os, 'ubuntu') }}
run: sudo apt-get update -y
- uses: actions/checkout@v2
- uses: briansmith/actions-checkout@v2
with:
persist-credentials: false
@ -290,7 +290,7 @@ jobs:
(powershell -ExecutionPolicy Bypass ./mk/install-build-tools.ps1) -and
("$pwd\target\tools" >> $env:GITHUB_PATH)
- uses: actions-rs/toolchain@v1
- uses: briansmith/actions-rs-toolchain@v1
with:
override: true
target: ${{ matrix.target }}
@ -342,7 +342,7 @@ jobs:
- if: ${{ contains(matrix.host_os, 'ubuntu') }}
run: sudo apt-get update -y
- uses: actions/checkout@v2
- uses: briansmith/actions-checkout@v2
with:
persist-credentials: false
@ -350,7 +350,7 @@ jobs:
- run: mk/install-build-tools.sh --target=${{ matrix.target }} ${{ matrix.features }}
- uses: actions-rs/toolchain@v1
- uses: briansmith/actions-rs-toolchain@v1
with:
override: true
target: ${{ matrix.target }}
@ -414,14 +414,14 @@ jobs:
- if: ${{ contains(matrix.host_os, 'ubuntu') }}
run: sudo apt-get update -y
- uses: actions/checkout@v2
- uses: briansmith/actions-checkout@v2
with:
persist-credentials: false
- if: ${{ !contains(matrix.host_os, 'windows') }}
run: RING_COVERAGE=1 mk/install-build-tools.sh --target=${{ matrix.target }} ${{ matrix.features }}
- uses: actions-rs/toolchain@v1
- uses: briansmith/actions-rs-toolchain@v1
with:
override: true
target: ${{ matrix.target }}
@ -434,7 +434,7 @@ jobs:
run: |
RING_COVERAGE=1 mk/cargo.sh +${{ matrix.rust_channel }} test -vv --target=${{ matrix.target }} ${{ matrix.cargo_options }} ${{ matrix.features }} ${{ matrix.mode }}
- uses: codecov/codecov-action@v1
- uses: briansmith/codecov-codecov-action@v1
with:
directory: ./target/${{ matrix.target }}/debug/coverage/reports
fail_ci_if_error: true