Skip to content

chore(actions): address zizmor findings #214

chore(actions): address zizmor findings

chore(actions): address zizmor findings #214

permissions:
contents: read
on:
push:
branches:
- main
pull_request:
name: java-cloud-bom ci
env:
BUILD_SUBDIR: java-cloud-bom
jobs:
filter:
runs-on: ubuntu-latest
outputs:
library: ${{ steps.filter.outputs.library }}
steps:
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
with:
persist-credentials: false
- uses: dorny/paths-filter@d1c1ffe0248fe513906c8e24db8ea791d46f8590 # v3
id: filter
with:
filters: |
library:
- 'java-cloud-bom/**'
- 'sdk-platform-java/**'
- 'google-auth-library-java/**'
dashboard:
needs: filter
if: ${{ needs.filter.outputs.library == 'true' }}
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
with:
persist-credentials: false
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5
with:
distribution: temurin
java-version: 11
cache: maven
- run: java -version
- run: .kokoro/dashboard.sh
env:
JOB_TYPE: dashboard-units-check
shared-dependencies-convergence:
needs: filter
if: ${{ needs.filter.outputs.library == 'true' && github.repository_owner == 'googleapis' && github.head_ref == 'release-please--branches--main' }}
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
with:
persist-credentials: false
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5
with:
distribution: temurin
java-version: 11
cache: maven
- run: java -version
- run: .kokoro/dashboard.sh
env:
JOB_TYPE: dependency-convergence-check