-
Notifications
You must be signed in to change notification settings - Fork 3
Remove conda default channel #765
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
WalkthroughThe GitHub Actions workflow files were updated to use version Changes
Estimated code review effort🎯 2 (Simple) | ⏱️ ~7 minutes Possibly related PRs
Poem
Note ⚡️ Unit Test Generation is now available in beta!Learn more here, or try it out under "Finishing Touches" below. 📜 Recent review detailsConfiguration used: CodeRabbit UI 📒 Files selected for processing (2)
✅ Files skipped from review due to trivial changes (1)
🚧 Files skipped from review as they are similar to previous changes (1)
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (3)
✨ Finishing Touches🧪 Generate unit tests
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
SupportNeed help? Create a ticket on our support page for assistance with any issues or questions. Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #765 +/- ##
=======================================
Coverage 97.47% 97.47%
=======================================
Files 32 32
Lines 1423 1423
=======================================
Hits 1387 1387
Misses 36 36 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Actionable comments posted: 0
♻️ Duplicate comments (12)
.github/workflows/pipeline.yml (12)
85-91: Duplicate of the comment above – same action tag and boolean quoting issues.
117-123: Duplicate of the comment above – same action tag and boolean quoting issues.
150-156: Duplicate of the comment above – same action tag and boolean quoting issues.
175-181: Duplicate of the comment above – same action tag and boolean quoting issues.
203-209: Duplicate of the comment above – same action tag and boolean quoting issues.
234-240: Duplicate of the comment above – same action tag and boolean quoting issues.
280-286: Duplicate of the comment above – same action tag and boolean quoting issues.
318-324: Duplicate of the comment above – same action tag and boolean quoting issues.
353-359: Duplicate of the comment above – same action tag and boolean quoting issues.
374-379: Duplicate of the comment above – same action tag and boolean quoting issues.
393-399: Duplicate of the comment above – same action tag and boolean quoting issues.
431-437: Duplicate of the comment above – same action tag and boolean quoting issues.
🧹 Nitpick comments (2)
.github/workflows/deploy.yml (1)
22-27: Pin the action to a commit SHA and pass the boolean natively
- Security ‒
conda-incubator/setup-miniconda@v3.2.0is still a mutable tag. Follow GitHub recommendations and pin to the full commit SHA to guard against supply-chain attacks.- Typing ‒
conda-remove-defaultsis a boolean input; quoting it ("true") turns it into a YAML string. Although the action coerces strings, passing the native boolean avoids surprises:- - uses: conda-incubator/setup-miniconda@v3.2.0 + - uses: conda-incubator/setup-miniconda@<commit-sha> - conda-remove-defaults: "true" + conda-remove-defaults: trueValidate that
.ci_support/environment-openmpi.ymlresolves without the defaults channel; otherwise add explicitconda-forgelabels or pin versions..github/workflows/pipeline.yml (1)
65-71: Same security & boolean-typing concerns apply hereRepeat the hard-pin + boolean advice for every
setup-miniconda@v3.2.0invocation in this workflow to keep the pipeline homogeneous and secure.
|
@liamhuber Even with the new option to remove the default environment, I get the following results: While with my previous version I explicitly overwrite the configuration in the home folder: While I agree that using the built-in option requires slightly fewer lines, the appearance of the defaults channel in the configuration file still makes me feel a bit uneasy. So I prefer to stay with the previous version. |
|
It must just be that here we fail to pass some flag to setup-miniconda. I'm copy-pasting the report from two runs so we can easily look at both
Here: |
|
@jan-janssen, yeah, the only difference I see is the |
7f5ccd8 to
2ff2346
Compare
|
Now I see why I was confused: The command |
2ff2346 to
d582eea
Compare
Summary by CodeRabbit