Skip to content

[ci] Refactor actions to be simple and reuse existing hooks#36

Closed
AshFungor wants to merge 5 commits intomasterfrom
update-actions
Closed

[ci] Refactor actions to be simple and reuse existing hooks#36
AshFungor wants to merge 5 commits intomasterfrom
update-actions

Conversation

@AshFungor
Copy link
Contributor

No description provided.

@mentatbot
Copy link

mentatbot bot commented Jun 13, 2025

You are out of Mentat credits. You can view and refresh your credits here.

To disable this message on pr open, disable Always Review on my settings page

- name: Install conan dependecies
run: |
conan profile detect && conan install . --build=missing
- uses: bazel-contrib/setup-bazel@0.15.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'HyperCPU CI/CD Pipeline (feature branch)' step
Uses Step
uses 'bazel-contrib/setup-bazel' with ref '0.15.0', not a pinned commit hash
- name: Install conan dependecies
run: |
conan profile detect && conan install . --build=missing
- uses: bazel-contrib/setup-bazel@0.15.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium test

Unpinned 3rd party Action 'HyperCPU CI/CD Pipeline' step
Uses Step
uses 'bazel-contrib/setup-bazel' with ref '0.15.0', not a pinned commit hash
git commit -m "[auto]: Increment patch version"
git push origin master
- name: Auto-commit version bump
uses: stefanzweifel/git-auto-commit-action@v5

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'HyperCPU CI/CD Pipeline (version incrementing)' step
Uses Step
uses 'stefanzweifel/git-auto-commit-action' with ref 'v5', not a pinned commit hash
run: tools/increment_version.py --increment minor

- name: Auto-commit version bump
uses: stefanzweifel/git-auto-commit-action@v5

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'HyperCPU CI/CD Pipeline (version incrementing)' step
Uses Step
uses 'stefanzweifel/git-auto-commit-action' with ref 'v5', not a pinned commit hash
with:
submodules: true

- uses: bazel-contrib/setup-bazel@0.15.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'HyperCPU CI/CD Pipeline (build HyperCPU on different platforms)' step
Uses Step
uses 'bazel-contrib/setup-bazel' with ref '0.15.0', not a pinned commit hash
@AshFungor AshFungor closed this Aug 22, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

Comments