Skip to content

Commit 1873949

Browse files
ChrisMcKeeChrisMcKee
committed
chore: update actions
1 parent 3d49d90 commit 1873949

8 files changed

Lines changed: 205 additions & 205 deletions

File tree

‎.github/workflows/ci-build-pr.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333
runs-on: ubuntu-24.04
3434
steps:
3535
- name: 'Harden Runner'
36-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
36+
uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
3737
with:
3838
egress-policy: audit
3939

@@ -43,7 +43,7 @@ jobs:
4343
fetch-depth: 0 # avoid shallow clone so nbgv can do its work.
4444

4545
- name: 'Setup .NET SDK'
46-
uses: actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309 # v5.1.0
46+
uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0
4747
with:
4848
dotnet-version: 10.x
4949

@@ -59,7 +59,7 @@ jobs:
5959
run: dotnet run --configuration Release --coverage --coverage-output-format cobertura --report-github --project tests/UnitTests/BCrypt.Net.UnitTests.csproj
6060

6161
- name: 'Generate Coverage Reports'
62-
uses: danielpalme/ReportGenerator-GitHub-Action@c4c5175a441c6603ec614f5084386dabe0e2295b # v5.4.12
62+
uses: danielpalme/ReportGenerator-GitHub-Action@049f7ec958c672fd31d5cc1cb01622dc8d2e23ab # 5.5.10
6363
with:
6464
reports: "tests/**/*.cobertura.xml"
6565
targetdir: "${{ github.workspace }}"
@@ -84,7 +84,7 @@ jobs:
8484
thresholds: "10 30"
8585

8686
- name: Upload Code Coverage Results
87-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
87+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
8888
with:
8989
name: coverage-results
9090
path: |
@@ -93,13 +93,13 @@ jobs:
9393
retention-days: 5
9494

9595
- name: Publish Test Results
96-
uses: EnricoMi/publish-unit-test-result-action@afb2984f4d89672b2f9d9c13ae23d53779671984 # v2.19.0
96+
uses: EnricoMi/publish-unit-test-result-action@c950f6fb443cb5af20a377fd0dfaa78838901040 # v2.23.0
9797
if: always()
9898
with:
9999
files: "tests/**/TestResults.xml"
100100

101101
- name: Upload Test Artifacts
102-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
102+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
103103
with:
104104
name: test-results
105105
path: "tests/**/TestResults.xml"

‎.github/workflows/ci-build.yml‎

Lines changed: 88 additions & 88 deletions
Original file line numberDiff line numberDiff line change
@@ -24,92 +24,92 @@ env:
2424
jobs:
2525
build:
2626
name: Build and Test
27-
runs-on: ubuntu-24.04
27+
runs-on: ubuntu-latest
2828
steps:
29-
- name: 'Harden Runner'
30-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
31-
with:
32-
egress-policy: audit
33-
34-
- name: 'Checkout'
35-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
36-
with:
37-
fetch-depth: 0 # avoid shallow clone so nbgv can do its work.
38-
39-
- name: 'Setup .NET SDK'
40-
uses: actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309 # v5.1.0
41-
with:
42-
dotnet-version: 10.0.x
43-
44-
- name: 'Restore external dependencies'
45-
run: dotnet restore
46-
47-
- name: 'Build'
48-
id: build
49-
run: dotnet build --configuration Debug --no-restore
50-
51-
- name: Upload Build Artifacts
52-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
53-
with:
54-
name: build-artifacts
55-
path: |
56-
src/**/BCrypt.*.nupkg
57-
retention-days: 5
58-
59-
- name: 'Test'
60-
id: test
61-
run: dotnet run --configuration Release --coverage --coverage-output-format cobertura --report-github --project tests/UnitTests/BCrypt.Net.UnitTests.csproj
62-
63-
- name: 'Create test summary'
64-
uses: test-summary/action@31493c76ec9e7aa675f1585d3ed6f1da69269a86 # v2.4
65-
with:
66-
paths: tests/UnitTests/**/TestResults.xml
67-
show: "fail, skip"
68-
if: always()
69-
70-
- name: 'Generate Coverage Reports'
71-
uses: danielpalme/ReportGenerator-GitHub-Action@c4c5175a441c6603ec614f5084386dabe0e2295b # v5.4.12
72-
with:
73-
reports: "tests/**/*.cobertura.xml"
74-
targetdir: "${{ github.workspace }}"
75-
reporttypes: "Cobertura"
76-
verbosity: "Info"
77-
title: "Code Coverage"
78-
tag: "${{ github.run_number }}_${{ github.run_id }}"
79-
toolpath: "reportgeneratortool"
80-
license: ${{ secrets.REPORT_GENERATOR_LICENSE }}
81-
82-
- name: Publish Code Coverage Report
83-
uses: irongut/CodeCoverageSummary@51cc3a756ddcd398d447c044c02cb6aa83fdae95 # v1.3.0
84-
with:
85-
filename: "Cobertura.xml"
86-
badge: true
87-
fail_below_min: false # just informative for now
88-
format: markdown
89-
hide_branch_rate: false
90-
hide_complexity: false
91-
indicators: true
92-
output: both
93-
thresholds: "10 30"
94-
95-
- name: Upload Code Coverage Results
96-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
97-
with:
98-
name: coverage-results
99-
path: |
100-
${{ github.workspace }}/Cobertura.xml
101-
${{ github.workspace }}/code-coverage-results.md
102-
retention-days: 5
103-
104-
- name: Publish Test Results
105-
uses: EnricoMi/publish-unit-test-result-action@afb2984f4d89672b2f9d9c13ae23d53779671984 # v2.19.0
106-
if: always()
107-
with:
108-
files: "tests/**/TestResults.xml"
109-
110-
- name: Upload Test Artifacts
111-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
112-
with:
113-
name: test-results
114-
path: "tests/**/TestResults.xml"
115-
retention-days: 5
29+
- name: Harden the runner
30+
uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
31+
with:
32+
egress-policy: audit
33+
34+
- name: 'Checkout'
35+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
36+
with:
37+
fetch-depth: 0 # avoid shallow clone so nbgv can do its work.
38+
39+
- name: 'Setup .NET SDK'
40+
uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0
41+
with:
42+
dotnet-version: 10.x
43+
44+
- name: 'Restore external dependencies'
45+
run: dotnet restore
46+
47+
- name: 'Build'
48+
id: build
49+
run: dotnet build --configuration Debug --no-restore
50+
51+
- name: Upload Build Artifacts
52+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
53+
with:
54+
name: build-artifacts
55+
path: |
56+
src/**/BCrypt.*.nupkg
57+
retention-days: 5
58+
59+
- name: 'Test'
60+
id: test
61+
run: dotnet run --configuration Release --coverage --coverage-output-format cobertura --report-github --project tests/UnitTests/BCrypt.Net.UnitTests.csproj
62+
63+
- name: 'Create test summary'
64+
uses: test-summary/action@37b508cfee6d4d080eedd00b5bb240a6a784a6a5 # v2.6
65+
with:
66+
paths: tests/UnitTests/**/TestResults.xml
67+
show: "fail, skip"
68+
if: always()
69+
70+
- name: 'Generate Coverage Reports'
71+
uses: danielpalme/ReportGenerator-GitHub-Action@049f7ec958c672fd31d5cc1cb01622dc8d2e23ab # 5.5.10
72+
with:
73+
reports: "tests/**/*.cobertura.xml"
74+
targetdir: "${{ github.workspace }}"
75+
reporttypes: "Cobertura"
76+
verbosity: "Info"
77+
title: "Code Coverage"
78+
tag: "${{ github.run_number }}_${{ github.run_id }}"
79+
toolpath: "reportgeneratortool"
80+
license: ${{ secrets.REPORT_GENERATOR_LICENSE }}
81+
82+
- name: Publish Code Coverage Report
83+
uses: irongut/CodeCoverageSummary@51cc3a756ddcd398d447c044c02cb6aa83fdae95 # v1.3.0
84+
with:
85+
filename: "Cobertura.xml"
86+
badge: true
87+
fail_below_min: false # just informative for now
88+
format: markdown
89+
hide_branch_rate: false
90+
hide_complexity: false
91+
indicators: true
92+
output: both
93+
thresholds: "10 30"
94+
95+
- name: Upload Code Coverage Results
96+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
97+
with:
98+
name: coverage-results
99+
path: |
100+
${{ github.workspace }}/Cobertura.xml
101+
${{ github.workspace }}/code-coverage-results.md
102+
retention-days: 5
103+
104+
- name: Publish Test Results
105+
uses: EnricoMi/publish-unit-test-result-action@c950f6fb443cb5af20a377fd0dfaa78838901040 # v2.23.0
106+
if: always()
107+
with:
108+
files: "tests/**/TestResults.xml"
109+
110+
- name: Upload Test Artifacts
111+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
112+
with:
113+
name: test-results
114+
path: "tests/**/TestResults.xml"
115+
retention-days: 5

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 25 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ env:
3636
jobs:
3737
analyze:
3838
name: Analyze
39-
runs-on: ubuntu-24.04
39+
runs-on: ubuntu-latest
4040
permissions:
4141
actions: read
4242
contents: read
@@ -50,33 +50,33 @@ jobs:
5050
# Learn more about CodeQL language support at https://git.io/codeql-language-support
5151

5252
steps:
53-
- name: Harden Runner
54-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
55-
with:
56-
egress-policy: audit
53+
- name: Harden the runner
54+
uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
55+
with:
56+
egress-policy: audit
5757

58-
- name: 'Checkout repository'
59-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
60-
with:
61-
fetch-depth: 0 # avoid shallow clone so nbgv can do its work.
58+
- name: 'Checkout repository'
59+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
60+
with:
61+
fetch-depth: 0 # avoid shallow clone so nbgv can do its work.
6262

63-
- name: 'Setup .NET SDK'
64-
uses: actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309 # v5.1.0
65-
with:
66-
dotnet-version: 10.x
63+
- name: 'Setup .NET SDK'
64+
uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0
65+
with:
66+
dotnet-version: 10.x
6767

68-
# Initializes the CodeQL tools for scanning.
69-
- name: Initialize CodeQL
70-
uses: github/codeql-action/init@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
71-
with:
72-
languages: ${{ matrix.language }}
73-
config-file: ./.github/codeql/codeql-config.yml
68+
# Initializes the CodeQL tools for scanning.
69+
- name: Initialize CodeQL
70+
uses: github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
71+
with:
72+
languages: ${{ matrix.language }}
73+
config-file: ./.github/codeql/codeql-config.yml
7474

75-
# We can't use autobuild because we want to restrict the build to just src folder solutions
76-
# and avoid triggering deterministic builds and git commit based versioning
77-
# (as GitHub workflows shallow clone by default, and that breaks the versioning.)
78-
- run: dotnet build --configuration CodeQL /p:UseSharedCompilation=false /t:rebuild
75+
# We can't use autobuild because we want to restrict the build to just src folder solutions
76+
# and avoid triggering deterministic builds and git commit based versioning
77+
# (as GitHub workflows shallow clone by default, and that breaks the versioning.)
78+
- run: dotnet build --configuration CodeQL /p:UseSharedCompilation=false /t:rebuild
7979

80-
- name: Perform CodeQL Analysis
81-
uses: github/codeql-action/analyze@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
80+
- name: Perform CodeQL Analysis
81+
uses: github/codeql-action/analyze@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
8282

‎.github/workflows/dependency-review.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -11,15 +11,15 @@ permissions:
1111

1212
jobs:
1313
dependency-review:
14-
runs-on: ubuntu-24.04
14+
runs-on: ubuntu-latest
1515
steps:
16-
- name: Harden Runner
17-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
16+
- name: Harden the runner
17+
uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
1818
with:
1919
egress-policy: audit
2020

2121
- name: 'Checkout Repository'
2222
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2323

2424
- name: 'Dependency Review'
25-
uses: actions/dependency-review-action@595b5aeba73380359d98a5e087f648dbb0edce1b # v4.7.3
25+
uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0

‎.github/workflows/devskim.yml‎

Lines changed: 32 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -1,32 +1,32 @@
1-
name: 'MSFT Dev Skim'
2-
3-
on:
4-
workflow_dispatch:
5-
pull_request:
6-
branches:
7-
- 'main'
8-
9-
permissions:
10-
# required for all workflows
11-
security-events: write
12-
# only required for workflows in private repositories
13-
actions: read
14-
contents: read
15-
16-
jobs:
17-
dependency-review:
18-
runs-on: ubuntu-24.04
19-
steps:
20-
- name: 'Harden Runner'
21-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
22-
with:
23-
egress-policy: audit
24-
25-
- name: 'Checkout'
26-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
27-
with:
28-
fetch-depth: 0 # avoid shallow clone so nbgv can do its work.
29-
- uses: microsoft/DevSkim-Action@4b5047945a44163b94642a1cecc0d93a3f428cc6 #v1.0.16
30-
- uses: github/codeql-action/upload-sarif@9e907b5e64f6b83e7804b09294d44122997950d6 #v4.32.3
31-
with:
32-
sarif_file: devskim-results.sarif
1+
name: 'MSFT Dev Skim'
2+
3+
on:
4+
workflow_dispatch:
5+
pull_request:
6+
branches:
7+
- 'main'
8+
9+
permissions:
10+
# required for all workflows
11+
security-events: write
12+
# only required for workflows in private repositories
13+
actions: read
14+
contents: read
15+
16+
jobs:
17+
dependency-review:
18+
runs-on: ubuntu-24.04
19+
steps:
20+
- name: 'Harden Runner'
21+
uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
22+
with:
23+
egress-policy: audit
24+
25+
- name: 'Checkout'
26+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
27+
with:
28+
fetch-depth: 0 # avoid shallow clone so nbgv can do its work.
29+
- uses: microsoft/DevSkim-Action@4b5047945a44163b94642a1cecc0d93a3f428cc6 #v1.0.16
30+
- uses: github/codeql-action/upload-sarif@9e0d7b8d25671d64c341c19c0152d693099fb5ba #v4.32.3 # v4.35.5
31+
with:
32+
sarif_file: devskim-results.sarif

0 commit comments

Comments
 (0)