Repository navigation
chore(ci): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 #2
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: ci | |
| on: | |
| pull_request: | |
| branches: [main] | |
| push: | |
| branches: [main] | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: ci-${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| rust: | |
| name: rust | |
| permissions: | |
| contents: read | |
| uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/rust-ci.yml@f66a2070d0b714643abb902ef5886ed43365cd47 | |
| with: | |
| toolchain: '1.97.1' | |
| # The three-OS matrix is the evidence ADR-0113 asks for, and standard | |
| # hosted runners are free with unlimited minutes on a public repository. | |
| test_matrix_os: '["ubuntu-latest", "macos-latest", "windows-latest"]' | |
| build_command: 'cargo build --locked --all-targets' | |
| test_command: 'cargo test --locked --all-targets' | |
| fmt_command: 'cargo fmt --all --check' | |
| clippy_command: 'cargo clippy --locked --all-targets -- -D warnings' | |
| msrv_toolchain: '1.89' | |
| supply-chain: | |
| name: supply-chain | |
| permissions: | |
| contents: read | |
| uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/rust-supply-chain.yml@f66a2070d0b714643abb902ef5886ed43365cd47 | |
| with: | |
| enable_deny: true | |
| enable_audit: true | |
| enable_machete: true | |
| actionlint: | |
| name: actionlint | |
| permissions: | |
| contents: read | |
| uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/actionlint.yml@f66a2070d0b714643abb902ef5886ed43365cd47 | |
| pr-hygiene: | |
| name: pr-hygiene | |
| if: github.event_name == 'pull_request' | |
| permissions: | |
| contents: read | |
| # The labeler applies labels and the stale bot closes threads. Their jobs | |
| # declare these statically, so the grant is required even when the toggle | |
| # that would use them is off. | |
| issues: write | |
| pull-requests: write | |
| uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/pr-hygiene.yml@f66a2070d0b714643abb902ef5886ed43365cd47 |