Skip to content
Merged
Show file tree
Hide file tree
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/benchmark-tests.yml
Original file line number Diff line number Diff line change
Expand Up @@ -6,12 +6,12 @@
workflow_dispatch:
name: benchmark-tests
jobs:
java-benchmarks:

Check warning on line 9 in .github/workflows/benchmark-tests.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

benchmark-tests.yml:9: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7

Check failure on line 12 in .github/workflows/benchmark-tests.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 12 in .github/workflows/benchmark-tests.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

benchmark-tests.yml:12: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- name: Setup Java
uses: actions/setup-java@v5
uses: actions/setup-java@v6

Check failure on line 14 in .github/workflows/benchmark-tests.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 14 in .github/workflows/benchmark-tests.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

benchmark-tests.yml:14: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
distribution: zulu
java-version: 17
Expand Down
14 changes: 7 additions & 7 deletions .github/workflows/ci.yaml
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
on:

Check warning on line 1 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

ci.yaml:1: overly broad permissions: default permissions used due to no permissions: block
push:
branches:
- main
Expand All @@ -11,7 +11,7 @@
GOOGLE_CLOUD_ENDPOINT: "spanner.googleapis.com"
JSON_SERVICE_ACCOUNT_CREDENTIALS: ${{ secrets.JSON_SERVICE_ACCOUNT_CREDENTIALS }}
jobs:
check-env:

Check warning on line 14 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

ci.yaml:14: overly broad permissions: default permissions used due to no permissions: block
outputs:
has-key: ${{ steps.project-id.outputs.defined }}
runs-on: ubuntu-latest
Expand All @@ -22,23 +22,23 @@
if: "${{ env.GCP_PROJECT_ID != '' }}"
run: echo "defined=true" >> "$GITHUB_OUTPUT"

lint:

Check warning on line 25 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

ci.yaml:25: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7

Check failure on line 28 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 28 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

ci.yaml:28: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- uses: actions/setup-java@v5
- uses: actions/setup-java@v6

Check failure on line 29 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 29 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

ci.yaml:29: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
java-version: 21
distribution: 'zulu'
- run: java -version
- run: mvn com.spotify.fmt:fmt-maven-plugin:check -B -ntp
e2e-psql-v12-v14:

Check warning on line 35 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

ci.yaml:35: overly broad permissions: default permissions used due to no permissions: block
needs: [check-env]
if: needs.check-env.outputs.has-key == 'true'
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7

Check failure on line 40 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 40 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

ci.yaml:40: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- uses: actions/setup-java@v5
- uses: actions/setup-java@v6

Check failure on line 41 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 41 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

ci.yaml:41: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
java-version: 11
distribution: 'zulu'
Expand All @@ -50,24 +50,24 @@
sudo apt-get update
sudo apt-get install postgresql-client-12
- id: 'auth'
uses: google-github-actions/auth@v3

Check failure on line 53 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 53 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

ci.yaml:53: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
credentials_json: '${{ secrets.JSON_SERVICE_ACCOUNT_CREDENTIALS }}'
- id: 'setup-gcloud'
uses: google-github-actions/setup-gcloud@v3

Check failure on line 57 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 57 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

ci.yaml:57: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
project_id: ${{ env.GOOGLE_CLOUD_PROJECT }}
- name: "Install gcloud alpha component"
run: gcloud components install alpha
- run: .ci/run-with-credentials.sh uber-jar-build
- run: .ci/run-with-credentials.sh e2e-psql 12 14.1
e2e-psql-v13-v14:

Check warning on line 64 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

ci.yaml:64: overly broad permissions: default permissions used due to no permissions: block
needs: [check-env]
if: needs.check-env.outputs.has-key == 'true'
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7

Check failure on line 69 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 69 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

ci.yaml:69: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- uses: actions/setup-java@v5
- uses: actions/setup-java@v6

Check failure on line 70 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

ci.yaml:70: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
java-version: 11
distribution: 'zulu'
Expand All @@ -90,13 +90,13 @@
run: gcloud components install alpha
- run: .ci/run-with-credentials.sh uber-jar-build
- run: .ci/run-with-credentials.sh e2e-psql 13 14.1
e2e-psql-v14-v14:

Check warning on line 93 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

ci.yaml:93: overly broad permissions: default permissions used due to no permissions: block
needs: [check-env]
if: needs.check-env.outputs.has-key == 'true'
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- uses: actions/setup-java@v5
- uses: actions/setup-java@v6
with:
java-version: 11
distribution: 'zulu'
Expand All @@ -119,13 +119,13 @@
run: gcloud components install alpha
- run: .ci/run-with-credentials.sh uber-jar-build
- run: .ci/run-with-credentials.sh e2e-psql 14 14.1
e2e-psql-v15-v14:

Check warning on line 122 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

ci.yaml:122: overly broad permissions: default permissions used due to no permissions: block
needs: [check-env]
if: needs.check-env.outputs.has-key == 'true'
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- uses: actions/setup-java@v5
- uses: actions/setup-java@v6
with:
java-version: 11
distribution: 'zulu'
Expand All @@ -148,13 +148,13 @@
run: gcloud components install alpha
- run: .ci/run-with-credentials.sh uber-jar-build
- run: .ci/run-with-credentials.sh e2e-psql 15 14.1
e2e-psql-v16-v14:

Check warning on line 151 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

ci.yaml:151: overly broad permissions: default permissions used due to no permissions: block
needs: [check-env]
if: needs.check-env.outputs.has-key == 'true'
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- uses: actions/setup-java@v5
- uses: actions/setup-java@v6
with:
java-version: 11
distribution: 'zulu'
Expand All @@ -177,13 +177,13 @@
run: gcloud components install alpha
- run: .ci/run-with-credentials.sh uber-jar-build
- run: .ci/run-with-credentials.sh e2e-psql 16 14.1
e2e-psql-v17-v14:

Check warning on line 180 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

ci.yaml:180: overly broad permissions: default permissions used due to no permissions: block
needs: [check-env]
if: needs.check-env.outputs.has-key == 'true'
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- uses: actions/setup-java@v5
- uses: actions/setup-java@v6
with:
java-version: 11
distribution: 'zulu'
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/go-sample-test.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ jobs:
steps:
- uses: actions/checkout@v7
- name: Setup Java
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
distribution: zulu
java-version: 11
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/integration-emulator.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ jobs:
steps:
- uses: actions/checkout@v7
- name: Setup Java
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
distribution: zulu
java-version: ${{matrix.java}}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/integration-tests-against-docker.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ jobs:
DOCKERFILE: "build/Dockerfile.ci"
steps:
- uses: actions/checkout@v7
- uses: actions/setup-java@v5
- uses: actions/setup-java@v6
with:
java-version: 8
distribution: 'zulu'
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/integration-windows.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ jobs:
steps:
- uses: actions/checkout@v7
- name: Setup Java
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
distribution: zulu
java-version: 17
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/integration.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -86,7 +86,7 @@ jobs:
echo "EXCLUDED_INTEGRATION_TESTS=SlowTest" >> $GITHUB_ENV
- uses: actions/checkout@v7
- name: Setup Java
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
distribution: zulu
java-version: 21
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/samples.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ jobs:
steps:
- uses: actions/checkout@v7
- name: Setup Java
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
distribution: zulu
java-version: 17
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/snippets.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@ jobs:
steps:
- uses: actions/checkout@v7
- name: Setup Java
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
distribution: zulu
java-version: 17
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/units.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ jobs:
java: [8, 11, 21]
steps:
- uses: actions/checkout@v7
- uses: actions/setup-java@v5
- uses: actions/setup-java@v6
with:
distribution: zulu
java-version: ${{matrix.java}}
Expand Down Expand Up @@ -48,7 +48,7 @@ jobs:
java: [8, 17]
steps:
- uses: actions/checkout@v7
- uses: actions/setup-java@v5
- uses: actions/setup-java@v6
with:
distribution: zulu
java-version: ${{matrix.java}}
Expand All @@ -70,7 +70,7 @@ jobs:
run: brew install coreutils
- name: install postgresql
run: brew install postgresql
- uses: actions/setup-java@v5
- uses: actions/setup-java@v6
with:
distribution: zulu
java-version: ${{matrix.java}}
Expand Down
Loading