sdk-hardening #203
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: sdk-hardening | |
| # Audits SDK adoption + held-back surface 4x/day so drift surfaces within hours. | |
| on: | |
| schedule: | |
| - cron: '37 1,7,13,19 * * *' | |
| workflow_dispatch: | |
| pull_request: | |
| paths: | |
| - '**/*.csproj' | |
| - 'global.json' | |
| - 'Directory.Packages.props' | |
| - '.github/workflows/sdk-hardening.yml' | |
| - '.github/scripts/sdk-hardening.sh' | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: sdk-hardening-${{ github.ref }} | |
| cancel-in-progress: false | |
| jobs: | |
| audit: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 | |
| - name: Audit SDK adoption | |
| env: | |
| SDK_NAME: ANcpLua.NET.Sdk | |
| ALLOW_MICROSOFT_NET_SDK: '' | |
| # Both held-back items collide with SDK auto-injection in non-trivial | |
| # ways and want their own focused PR — see #109 body for the full | |
| # rationale. | |
| HELD_BACK: | | |
| src/ErrorOrX.Generators/ErrorOrX.Generators.csproj|custom <NuspecFile> + manual Microsoft.CodeAnalysis.CSharp PrivateAssets ref under CPM via $(MicrosoftCodeAnalysisCSharpVersion) — collides with the SDK's implicit Roslyn pin | |
| tests/ErrorOrX.Integration.Tests/ErrorOrX.Integration.Tests.csproj|Sdk.Web + name-based test-detection + manual xunit.v3.mtp-v2/MvcTesting refs interact non-trivially with the SDK's test-injection | |
| BANNED_PACKAGES: | | |
| PolySharp | |
| FluentAssertions | |
| Microsoft.NET.Test.Sdk | |
| SDK_PIN_PACKAGES: | | |
| ANcpLua.NET.Sdk | |
| ANcpLua.NET.Sdk.Web | |
| ANcpLua.NET.Sdk.Test | |
| run: bash .github/scripts/sdk-hardening.sh |