From 6951d464f96e1efc7c1966a770d028c9cd75706b Mon Sep 17 00:00:00 2001 From: Gonzalo Diaz Date: Wed, 11 Dec 2024 18:38:28 -0300 Subject: [PATCH 1/3] [CONFIG] [Github Actions] Now use fixed version of Github Actions images. --- .github/workflows/codeql.yml | 2 +- .github/workflows/docker-image.yml | 10 +++++----- .github/workflows/gitleaks.yml | 2 +- .github/workflows/markdown-lint.yml | 2 +- .github/workflows/python-coverage.yml | 2 +- .github/workflows/python.yml | 2 +- .github/workflows/snyk-code.yml | 2 +- .github/workflows/yamllint.yml | 2 +- 8 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index f59de0e8..e2a70b83 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -23,7 +23,7 @@ on: # yamllint disable-line rule:truthy jobs: analyze: name: Analyze - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 permissions: actions: read contents: read diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index 26996d08..2ae02e6a 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -18,7 +18,7 @@ jobs: build: name: "Build Docker images" - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 @@ -73,7 +73,7 @@ jobs: lint: name: "Run in docker: LINT" - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 needs: build steps: - name: Download artifact @@ -93,7 +93,7 @@ jobs: test: name: "Run in docker: TEST" - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 needs: build steps: - name: Download artifact @@ -113,7 +113,7 @@ jobs: security: name: "Snyk Container" - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 needs: build permissions: actions: read @@ -160,7 +160,7 @@ jobs: sarif_file: 'snyk.sarif' scan: name: "Trivy" - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 needs: build permissions: actions: read diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml index b129409c..b13eb4a8 100644 --- a/.github/workflows/gitleaks.yml +++ b/.github/workflows/gitleaks.yml @@ -19,7 +19,7 @@ on: # yamllint disable-line rule:truthy jobs: scan: name: gitleaks - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 steps: - uses: actions/checkout@v4 with: diff --git a/.github/workflows/markdown-lint.yml b/.github/workflows/markdown-lint.yml index 45a96266..01c4b4e3 100644 --- a/.github/workflows/markdown-lint.yml +++ b/.github/workflows/markdown-lint.yml @@ -11,7 +11,7 @@ on: # yamllint disable-line rule:truthy jobs: build: - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 strategy: matrix: diff --git a/.github/workflows/python-coverage.yml b/.github/workflows/python-coverage.yml index 617a54d8..957a7794 100644 --- a/.github/workflows/python-coverage.yml +++ b/.github/workflows/python-coverage.yml @@ -18,7 +18,7 @@ jobs: strategy: fail-fast: false matrix: - os: ["ubuntu-latest"] + os: ["ubuntu-24.04"] python: ["3.12"] runs-on: ${{ matrix.os }} steps: diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml index 1c095478..66a43bf6 100644 --- a/.github/workflows/python.yml +++ b/.github/workflows/python.yml @@ -18,7 +18,7 @@ jobs: strategy: fail-fast: false matrix: - os: ["windows-latest", "ubuntu-latest", "macOS-latest"] + os: ["ubuntu-24.04", "macos-14", "windows-2022"] python: ["3.10", "3.11", "3.12"] runs-on: ${{ matrix.os }} steps: diff --git a/.github/workflows/snyk-code.yml b/.github/workflows/snyk-code.yml index 82290119..2ded1ef6 100644 --- a/.github/workflows/snyk-code.yml +++ b/.github/workflows/snyk-code.yml @@ -12,7 +12,7 @@ on: # yamllint disable-line rule:truthy jobs: security: - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 steps: - uses: actions/checkout@master - name: Run Snyk to check for vulnerabilities diff --git a/.github/workflows/yamllint.yml b/.github/workflows/yamllint.yml index 293de313..2141c436 100644 --- a/.github/workflows/yamllint.yml +++ b/.github/workflows/yamllint.yml @@ -11,7 +11,7 @@ on: # yamllint disable-line rule:truthy jobs: lint: - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 steps: - name: Checkout repository uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 From f793cdfb67b6e101286e0205ae659713154eb640 Mon Sep 17 00:00:00 2001 From: Gonzalo Diaz Date: Wed, 11 Dec 2024 18:44:06 -0300 Subject: [PATCH 2/3] [CONFIG] [Github Actions] markdownlint standardization. --- .github/workflows/markdown-lint.yml | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/.github/workflows/markdown-lint.yml b/.github/workflows/markdown-lint.yml index 01c4b4e3..b8b2b8c7 100644 --- a/.github/workflows/markdown-lint.yml +++ b/.github/workflows/markdown-lint.yml @@ -9,13 +9,15 @@ on: # yamllint disable-line rule:truthy branches: ["main"] workflow_dispatch: +permissions: read-all + jobs: build: runs-on: ubuntu-24.04 strategy: matrix: - node-version: [20.x] + node-version: [22.x] # See supported Node.js release schedule # at https://nodejs.org/en/about/releases/ @@ -31,9 +33,6 @@ jobs: - name: Install dependencies run: npm install -g markdownlint-cli - - name: Version - run: markdownlint --version - - name: Lint run: > markdownlint '**/*.md' --ignore node_modules From bf7a593b642cd0022779097ad15c01e853756a2d Mon Sep 17 00:00:00 2001 From: Gonzalo Diaz Date: Wed, 11 Dec 2024 18:43:49 -0300 Subject: [PATCH 3/3] [CONFIG] [Github Actions] Better naming for actions. --- .github/workflows/markdown-lint.yml | 3 ++- .github/workflows/python-coverage.yml | 4 ++-- .github/workflows/yamllint.yml | 1 + 3 files changed, 5 insertions(+), 3 deletions(-) diff --git a/.github/workflows/markdown-lint.yml b/.github/workflows/markdown-lint.yml index b8b2b8c7..1b47c9ae 100644 --- a/.github/workflows/markdown-lint.yml +++ b/.github/workflows/markdown-lint.yml @@ -12,7 +12,8 @@ on: # yamllint disable-line rule:truthy permissions: read-all jobs: - build: + markdownlint: + name: Markdown Lint runs-on: ubuntu-24.04 strategy: diff --git a/.github/workflows/python-coverage.yml b/.github/workflows/python-coverage.yml index 957a7794..d21f99f0 100644 --- a/.github/workflows/python-coverage.yml +++ b/.github/workflows/python-coverage.yml @@ -13,8 +13,8 @@ env: LOG_LEVEL: INFO jobs: - build: - name: "Run CI" + coverage: + name: "Python CI Coverage" strategy: fail-fast: false matrix: diff --git a/.github/workflows/yamllint.yml b/.github/workflows/yamllint.yml index 2141c436..9cb9e0b3 100644 --- a/.github/workflows/yamllint.yml +++ b/.github/workflows/yamllint.yml @@ -11,6 +11,7 @@ on: # yamllint disable-line rule:truthy jobs: lint: + name: YAML lint runs-on: ubuntu-24.04 steps: - name: Checkout repository