wip

Author: tangrufus

.github/workflows/audit.yml

@@ -20,7 +20,7 @@ permissions:
 
 jobs:
   php:
-    uses: typisttech/.github/.github/workflows/audit-php.yml@v5
+    uses: typisttech/.github/.github/workflows/audit-php.yml@v5.2.1
 
   go:
-    uses: typisttech/.github/.github/workflows/audit-go.yml@v5
+    uses: typisttech/.github/.github/workflows/audit-go.yml@v5.2.1

.github/workflows/lint.yml

@@ -18,18 +18,18 @@ permissions:
 
 jobs:
   actions:
-    uses: typisttech/.github/.github/workflows/lint-actions.yml@7b89b88a2e9768adc532a741ec37de5921ad248e # v5.1.1
+    uses: typisttech/.github/.github/workflows/lint-actions.yml@v5.2.1
 
   php:
-    uses: typisttech/.github/.github/workflows/lint-php.yml@v5
+    uses: typisttech/.github/.github/workflows/lint-php.yml@v5.2.1
     with:
       phpstan: true
       box: true
       box-php-version: '8.5'
       box-version: '4'
 
   go:
-    uses: typisttech/.github/.github/workflows/lint-go.yml@7b89b88a2e9768adc532a741ec37de5921ad248e # v5.1.1
+    uses: typisttech/.github/.github/workflows/lint-go.yml@v5.2.1
     with:
       golangci-lint: true
       golangci-lint-version: v2.11 # Must be kept in sync with @../../mise.toml

.github/workflows/test.yml

@@ -21,7 +21,9 @@ jobs:
   pest:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
 
       - uses: shivammathur/setup-php@v2
         with:
@@ -31,38 +33,42 @@ jobs:
 
       - run: composer pest:unit -- --coverage-clover coverage-unit.xml --ci
 
-      - uses: actions/upload-artifact@v6
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
-          name: coverage
           path: coverage-unit.xml
+          archive: false
+          if-no-files-found: error
 
   codecov:
     needs: pest
     runs-on: ubuntu-latest
     permissions:
+      contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
 
-      - uses: actions/download-artifact@v7
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
-          name: coverage
+          name: coverage.out
 
-      - uses: codecov/codecov-action@v5
+      - uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
         with:
           use_oidc: true
           fail_ci_if_error: true
           disable_search: true
           files: coverage-unit.xml
-          flags: unit
 
   phar:
     runs-on: ubuntu-24.04
     outputs:
       php-version: ${{ steps.setup-php.outputs.php-version }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
+          persist-credentials: false
           fetch-depth: 0
 
       - uses: shivammathur/setup-php@v2
@@ -77,10 +83,10 @@ jobs:
 
       - run: box compile
 
-      - uses: actions/upload-artifact@v6
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
-          name: phar
           path: phar/php-matrix
+          archive: false
           if-no-files-found: error
 
   build:
@@ -118,10 +124,14 @@ jobs:
           PATTERN: spc-${{ matrix.spc-variant }}.tar.gz
           GH_TOKEN: ${{ github.token }}
 
-      - uses: actions/download-artifact@v7
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
-          name: phar
-          path: phar
+          name: phar/php-matrix
+
+      # TODO!
+      - run: ls
+      # TODO!
+      - run: ls phar
 
       - name: Restore cached micro.sfx
         id: restore-micro-sfx