Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/release.yaml
Original file line number Diff line number Diff line change
@@ -1,14 +1,14 @@
---
name: release

Check warning on line 2 in .github/workflows/release.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

release.yaml:2: overly broad permissions: default permissions used due to no permissions: block
on:
push:
tags: v[0-9]+.[0-9]+.[0-9]+
jobs:
inspect:

Check warning on line 7 in .github/workflows/release.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

release.yaml:7: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-latest
container: python:3.10
steps:
- uses: actions/checkout@v3
- uses: actions/checkout@v7

Check failure on line 11 in .github/workflows/release.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 11 in .github/workflows/release.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

release.yaml:11: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
fetch-depth: 0
- name: Get the version from the tag.
Expand All @@ -27,12 +27,12 @@
outputs:
version: ${{ steps.get_version.outputs.version }}
release_notes: ${{ steps.release_tool.outputs.release_notes }}
github_release:

Check warning on line 30 in .github/workflows/release.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

release.yaml:30: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-latest
needs: inspect
steps:
- name: Create the GitHub release
uses: actions/create-release@v1

Check failure on line 35 in .github/workflows/release.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check warning on line 35 in .github/workflows/release.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

archived-uses

release.yaml:35: action or reusable workflow from archived repository: repository is archived

Check failure on line 35 in .github/workflows/release.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

release.yaml:35: unpinned action reference: action is not pinned to a hash (required by blanket policy)
env:
GITHUB_TOKEN: ${{ github.token }}
with:
Expand All @@ -41,25 +41,25 @@
body: ${{ needs.inspect.outputs.release_notes }}
draft: false
prerelease: false
pypi_release:

Check warning on line 44 in .github/workflows/release.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

release.yaml:44: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-latest
container: python:3.10
needs:
- inspect
- github_release
steps:
- uses: actions/checkout@v3
- uses: actions/checkout@v7

Check failure on line 51 in .github/workflows/release.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 51 in .github/workflows/release.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

release.yaml:51: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- name: Install twine.
run: pip install twine
- name: Set the version number.
run: |
cat > VERSION <<EOF
${{ needs.inspect.outputs.version }}

Check failure on line 57 in .github/workflows/release.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/template-injection

code injection via template expansion: may expand into attacker-controllable code
EOF
- name: Create a source distribution.
run: python setup.py sdist
- name: Upload to PyPI.
run: twine upload dist/*

Check notice on line 62 in .github/workflows/release.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

use-trusted-publishing

release.yaml:62: prefer trusted publishing for authentication: this command
env:
TWINE_USERNAME: ${{ secrets.PYPI_USERNAME }}
TWINE_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/test.yaml
Original file line number Diff line number Diff line change
@@ -1,43 +1,43 @@
---
name: test

Check warning on line 2 in .github/workflows/test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

test.yaml:2: overly broad permissions: default permissions used due to no permissions: block
on:
pull_request:
branches: master
jobs:
tests:

Check warning on line 7 in .github/workflows/test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

test.yaml:7: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-latest
container: python:3.10
steps:
- uses: actions/checkout@v3
- uses: actions/checkout@v7

Check failure on line 11 in .github/workflows/test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 11 in .github/workflows/test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

test.yaml:11: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- name: Install package.
run: pip install -e .
- name: Install test dependencies.
run: pip install pytest
- name: Run the tests
run: pytest
build:

Check warning on line 18 in .github/workflows/test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

test.yaml:18: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-latest
container: python:3.10
steps:
- uses: actions/checkout@v3
- uses: actions/checkout@v7

Check failure on line 22 in .github/workflows/test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 22 in .github/workflows/test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

test.yaml:22: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- name: Install package.
run: pip install .
- name: Build the test site.
run: aip-site-gen tests/test_data/ /out/
lint:

Check warning on line 27 in .github/workflows/test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

test.yaml:27: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-latest
container: python:3.10
steps:
- uses: actions/checkout@v3
- uses: actions/checkout@v7

Check failure on line 31 in .github/workflows/test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 31 in .github/workflows/test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

test.yaml:31: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- name: Install the linter (flake8).
run: pip install flake8
- name: Run the linter.
run: flake8 aip_site/ tests/
mypy:

Check warning on line 36 in .github/workflows/test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

test.yaml:36: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-latest
container: python:3.10
steps:
- uses: actions/checkout@v3
- uses: actions/checkout@v7

Check failure on line 40 in .github/workflows/test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 40 in .github/workflows/test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

test.yaml:40: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- name: Install package.
run: pip install .
- name: Install mypy.
Expand Down
2 changes: 1 addition & 1 deletion setup.py
Original file line number Diff line number Diff line change
Expand Up @@ -49,7 +49,7 @@
'itsdangerous==2.1.2',
'jinja2==3.1.2',
'markdown==3.4.1',
'markupsafe==2.1.1',
'markupsafe==3.0.3',
'pygments==2.13.0',
'pymdown-extensions==9.7',
'pyscss @ git+https://github.com/aip-dev/pyScss.git@master',
Expand Down
Loading