chore(deps): update step-security/harden-runner action to v2.18.0 #293
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Test - Other | |
| on: | |
| push: | |
| branches: | |
| - master | |
| pull_request: | |
| # set empty default permissions and define them explicitly in each job for security | |
| permissions: {} | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| test-reviewdog-flags: | |
| if: github.event_name == 'pull_request' | |
| name: runner / checkstyle (reviewdog-flags) | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df # v2.18.0 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - uses: ./ | |
| with: | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| reviewdog_flags: -filter-mode=added -fail-level=none | |
| exclude: | | |
| testdata/java/excluded | |
| testdata/java/excluded dir | |
| test-properties-file: | |
| if: github.event_name == 'pull_request' | |
| name: runner / checkstyle (properties_file) | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df # v2.18.0 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - uses: ./ | |
| with: | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| workdir: ./testdata/java/ | |
| checkstyle_config: ./testdata/properties_file/test_checks.xml | |
| properties_file: ./testdata/properties_file/additional.properties | |
| exclude: | | |
| testdata/java/excluded | |
| testdata/java/excluded dir | |
| test-exclude: | |
| if: github.event_name == 'pull_request' | |
| name: runner / checkstyle (exclude) | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df # v2.18.0 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - uses: ./ | |
| with: | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| reporter: github-pr-check | |
| fail_level: error | |
| exclude: | | |
| testdata/java/excluded | |
| testdata/java/excluded dir | |
| test-exclude-multi: | |
| if: github.event_name == 'pull_request' | |
| name: runner / checkstyle (exclude-multi) | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df # v2.18.0 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - uses: ./ | |
| with: | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| reporter: github-pr-check | |
| fail_level: error | |
| exclude: | | |
| testdata/java/excluded | |
| testdata/java/excluded dir | |
| .github | |
| test-exclude-space: | |
| if: github.event_name == 'pull_request' | |
| name: runner / checkstyle (exclude-space) | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df # v2.18.0 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - uses: ./ | |
| with: | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| reporter: github-pr-check | |
| fail_level: error | |
| exclude: | | |
| testdata/java/excluded | |
| testdata/java/excluded dir | |
| test-invalid-config: | |
| if: github.event_name == 'pull_request' | |
| name: runner / checkstyle (invalid-config) | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df # v2.18.0 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - name: Run with invalid config (expect failure) | |
| id: invalid_config | |
| continue-on-error: true | |
| uses: ./ | |
| with: | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| checkstyle_config: nonexistent_config.xml | |
| - name: Verify failure | |
| if: steps.invalid_config.outcome != 'failure' | |
| run: | | |
| echo "Expected failure but got: ${{ steps.invalid_config.outcome }}" | |
| exit 1 | |
| test-invalid-version: | |
| if: github.event_name == 'pull_request' | |
| name: runner / checkstyle (invalid-version) | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df # v2.18.0 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - name: Run with invalid version (expect failure) | |
| id: invalid_version | |
| continue-on-error: true | |
| uses: ./ | |
| with: | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| checkstyle_version: "999.0.0" | |
| - name: Verify failure | |
| if: steps.invalid_version.outcome != 'failure' | |
| run: | | |
| echo "Expected failure but got: ${{ steps.invalid_version.outcome }}" | |
| exit 1 |