Merge pull request #4299 from facebook/ga_harden

Improved Github Actions scorecards
This commit is contained in:
Yann Collet 2025-02-18 15:26:29 -08:00 committed by GitHub
commit ea027ab21c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 6 additions and 4 deletions

View File

@ -6,6 +6,8 @@ on:
push: push:
branches: [ actionsTest, '*ndk*' ] branches: [ actionsTest, '*ndk*' ]
permissions: read-all
jobs: jobs:
build: build:
runs-on: ubuntu-latest runs-on: ubuntu-latest
@ -14,13 +16,13 @@ jobs:
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # tag=v4.1.1 - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # tag=v4.1.1
- name: Set up JDK 17 - name: Set up JDK 17
uses: actions/setup-java@v4 uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
with: with:
java-version: '17' java-version: '17'
distribution: 'temurin' distribution: 'temurin'
- name: Setup Android SDK - name: Setup Android SDK
uses: android-actions/setup-android@v3 uses: android-actions/setup-android@9fc6c4e9069bf8d3d10b2204b1fb8f6ef7065407 # v3.2.2
- name: Install Android NDK - name: Install Android NDK
run: | run: |

View File

@ -97,7 +97,7 @@ jobs:
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # tag=v4.1.1 - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # tag=v4.1.1
with: with:
path: "${{ env.SRC_DIR }}" path: "${{ env.SRC_DIR }}"
- uses: ilammy/msvc-dev-cmd@v1 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0
if: ${{ matrix.generator == 'NMake Makefiles' }} if: ${{ matrix.generator == 'NMake Makefiles' }}
- name: cmake build on a source directory with spaces - name: cmake build on a source directory with spaces
run: | run: |
@ -722,4 +722,4 @@ jobs:
- name: make check - name: make check
run: | run: |
source /opt/intel/oneapi/setvars.sh source /opt/intel/oneapi/setvars.sh
make CC=icx check make CC=icx check