@@ -16,7 +16,7 @@ permissions:
1616
1717jobs :
1818 init :
19- runs-on : ubuntu-latest
19+ runs-on : ubuntu-latest-low
2020
2121 # On pull requests and if the comment starts with `/compile`
2222 if : github.event.issue.pull_request != '' && startsWith(github.event.comment.body, '/compile')
3030
3131 steps :
3232 - name : Get repository from pull request comment
33- uses : actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8 .0.0
33+ uses : actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 .0.0
3434 id : get-repository
3535 with :
3636 github-token : ${{secrets.GITHUB_TOKEN}}
5959 - name : Add reaction on start
6060 uses : peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
6161 with :
62- token : ${{ secrets.COMMAND_BOT_PAT }}
62+ token : ${{ secrets.COMMAND_BOT_PAT }} # zizmor: ignore[secrets-outside-env]
6363 repository : ${{ github.event.repository.full_name }}
6464 comment-id : ${{ github.event.comment.id }}
6565 reactions : ' +1'
8686 uses : peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
8787 if : failure()
8888 with :
89- token : ${{ secrets.COMMAND_BOT_PAT }}
89+ token : ${{ secrets.COMMAND_BOT_PAT }} # zizmor: ignore[secrets-outside-env]
9090 repository : ${{ github.event.repository.full_name }}
9191 comment-id : ${{ github.event.comment.id }}
9292 reactions : ' -1'
@@ -97,17 +97,17 @@ jobs:
9797
9898 steps :
9999 - name : Restore cached git repository
100- uses : buildjet /cache@3e70d19e31d6a8030aeddf6ed8dbe601f94d09f4 # v4 .0.2
100+ uses : actions /cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5 .0.5
101101 with :
102102 path : .git
103103 key : git-repo
104104
105105 - name : Checkout ${{ needs.init.outputs.head_ref }}
106- uses : actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
106+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
107107 with :
108108 # Needed to allow force push later
109109 persist-credentials : true
110- token : ${{ secrets.COMMAND_BOT_PAT }}
110+ token : ${{ secrets.COMMAND_BOT_PAT }} # zizmor: ignore[secrets-outside-env]
111111 fetch-depth : 0
112112 ref : ${{ needs.init.outputs.head_ref }}
113113
@@ -124,7 +124,7 @@ jobs:
124124 fallbackNpm : ' ^11.3'
125125
126126 - name : Set up node ${{ steps.package-engines-versions.outputs.nodeVersion }}
127- uses : actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0 .0
127+ uses : actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3 .0
128128 with :
129129 node-version : ${{ steps.package-engines-versions.outputs.nodeVersion }}
130130 cache : npm
@@ -216,7 +216,7 @@ jobs:
216216 uses : peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
217217 if : failure()
218218 with :
219- token : ${{ secrets.COMMAND_BOT_PAT }}
219+ token : ${{ secrets.COMMAND_BOT_PAT }} # zizmor: ignore[secrets-outside-env]
220220 repository : ${{ github.event.repository.full_name }}
221221 comment-id : ${{ github.event.comment.id }}
222222 reactions : ' -1'
0 commit comments