Skip to content

Commit

Permalink
Update pre-commit.yml
Browse files Browse the repository at this point in the history
  • Loading branch information
tschm authored Feb 2, 2025
1 parent 6b22fea commit 6fe3132
Showing 1 changed file with 8 additions and 2 deletions.
10 changes: 8 additions & 2 deletions .github/workflows/pre-commit.yml
Original file line number Diff line number Diff line change
Expand Up @@ -11,15 +11,21 @@ jobs:
test:
runs-on: ubuntu-latest
steps:
- uses: cvxgrp/.github/actions/uv/[email protected]
- name: "Build the virtual environment for ${{ github.repository }}"
uses: cvxgrp/.github/actions/uv/[email protected]

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'pre-commit' step
Uses Step
uses 'cvxgrp/.github/actions/uv/environment' with ref 'v2.1.0', not a pinned commit hash

- uses: cvxgrp/.github/actions/[email protected]

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'pre-commit' step
Uses Step
uses 'cvxgrp/.github/actions/coverage' with ref 'v2.1.0', not a pinned commit hash
with:
source-folder: src/cradle
tests-folder: src/tests

deptry:
runs-on: ubuntu-latest
steps:
- uses: cvxgrp/.github/actions/uv/[email protected]
- name: "Build the virtual environment for ${{ github.repository }}"
uses: cvxgrp/.github/actions/uv/[email protected]

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'pre-commit' step
Uses Step
uses 'cvxgrp/.github/actions/uv/environment' with ref 'v2.1.0', not a pinned commit hash

- uses: cvxgrp/.github/actions/[email protected]

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'pre-commit' step
Uses Step
uses 'cvxgrp/.github/actions/deptry' with ref 'v2.1.0', not a pinned commit hash
with:
source-folder: src/cradle

Expand Down

0 comments on commit 6fe3132

Please sign in to comment.