Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/JetLagged.yaml
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
name: JetLagged

Check warning on line 1 in .github/workflows/JetLagged.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

JetLagged.yaml:1: overly broad permissions: default permissions used due to no permissions: block

on:
push:
Expand All @@ -19,7 +19,7 @@
compose_key_alias: ${{ secrets.COMPOSE_KEY_ALIAS }}
compose_key_password: ${{ secrets.COMPOSE_KEY_PASSWORD }}
jobs:
build:

Check warning on line 22 in .github/workflows/JetLagged.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

JetLagged.yaml:22: overly broad permissions: default permissions used due to no permissions: block
uses: ./.github/workflows/build-sample.yml
with:
name: JetLagged
Expand All @@ -29,7 +29,7 @@
compose_key_alias: ${{ secrets.COMPOSE_KEY_ALIAS }}
compose_key_password: ${{ secrets.COMPOSE_KEY_PASSWORD }}

test:

Check warning on line 32 in .github/workflows/JetLagged.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

JetLagged.yaml:32: overly broad permissions: default permissions used due to no permissions: block
needs: build
runs-on: ubuntu-latest
timeout-minutes: 30
Expand All @@ -39,13 +39,13 @@

steps:
- name: Checkout
uses: actions/checkout@v6

Check failure on line 42 in .github/workflows/JetLagged.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 42 in .github/workflows/JetLagged.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

JetLagged.yaml:42: unpinned action reference: action is not pinned to a hash (required by blanket policy)

- name: Copy CI gradle.properties
run: mkdir -p ~/.gradle ; cp .github/ci-gradle.properties ~/.gradle/gradle.properties

- name: Set up JDK 17
uses: actions/setup-java@v5
uses: actions/setup-java@v6

Check failure on line 48 in .github/workflows/JetLagged.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 48 in .github/workflows/JetLagged.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

JetLagged.yaml:48: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
java-version: 17
distribution: 'zulu'
Expand All @@ -53,7 +53,7 @@
- name: Generate cache key
run: ./scripts/checksum.sh $SAMPLE_PATH checksum.txt

- uses: actions/cache@v5

Check failure on line 56 in .github/workflows/JetLagged.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 56 in .github/workflows/JetLagged.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

JetLagged.yaml:56: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
path: |
~/.gradle/caches/modules-*
Expand All @@ -62,7 +62,7 @@
key: gradle-${{ hashFiles('checksum.txt') }}

- name: Run instrumentation tests
uses: reactivecircus/android-emulator-runner@v2

Check failure on line 65 in .github/workflows/JetLagged.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 65 in .github/workflows/JetLagged.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

JetLagged.yaml:65: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
api-level: ${{ matrix.api-level }}
arch: x86
Expand All @@ -72,7 +72,7 @@

- name: Upload test reports
if: always()
uses: actions/upload-artifact@v6

Check failure on line 75 in .github/workflows/JetLagged.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 75 in .github/workflows/JetLagged.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

JetLagged.yaml:75: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
name: test-reports-jetlagged-${{ matrix.api-level }}
path: ${{ env.SAMPLE_PATH }}/app/build/reports
2 changes: 1 addition & 1 deletion .github/workflows/JetNews.yaml
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
name: JetNews

Check warning on line 1 in .github/workflows/JetNews.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

JetNews.yaml:1: overly broad permissions: default permissions used due to no permissions: block

on:
push:
Expand All @@ -19,7 +19,7 @@
compose_key_alias: ${{ secrets.compose_key_alias }}
compose_key_password: ${{ secrets.compose_key_password }}
jobs:
build:

Check warning on line 22 in .github/workflows/JetNews.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

JetNews.yaml:22: overly broad permissions: default permissions used due to no permissions: block
uses: ./.github/workflows/build-sample.yml
with:
name: JetNews
Expand All @@ -29,7 +29,7 @@
compose_key_alias: ${{ secrets.COMPOSE_KEY_ALIAS }}
compose_key_password: ${{ secrets.COMPOSE_KEY_PASSWORD }}

androidTest:

Check warning on line 32 in .github/workflows/JetNews.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

JetNews.yaml:32: overly broad permissions: default permissions used due to no permissions: block
needs: build
runs-on: ubuntu-latest
timeout-minutes: 30
Expand All @@ -39,7 +39,7 @@

steps:
- name: Checkout
uses: actions/checkout@v6

Check failure on line 42 in .github/workflows/JetNews.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 42 in .github/workflows/JetNews.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

JetNews.yaml:42: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- name: Enable KVM group perms
run: |
echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules
Expand All @@ -49,7 +49,7 @@
run: mkdir -p ~/.gradle ; cp .github/ci-gradle.properties ~/.gradle/gradle.properties

- name: Set up JDK 17
uses: actions/setup-java@v5
uses: actions/setup-java@v6

Check failure on line 52 in .github/workflows/JetNews.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 52 in .github/workflows/JetNews.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

JetNews.yaml:52: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
java-version: 17
distribution: 'zulu'
Expand All @@ -57,7 +57,7 @@
- name: Generate cache key
run: ./scripts/checksum.sh $SAMPLE_PATH checksum.txt

- uses: actions/cache@v5

Check failure on line 60 in .github/workflows/JetNews.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 60 in .github/workflows/JetNews.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

JetNews.yaml:60: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
path: |
~/.gradle/caches/modules-*
Expand All @@ -65,7 +65,7 @@
~/.gradle/caches/build-cache-*
key: gradle-${{ hashFiles('checksum.txt') }}
- name: Run instrumentation tests
uses: reactivecircus/android-emulator-runner@v2

Check failure on line 68 in .github/workflows/JetNews.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 68 in .github/workflows/JetNews.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

JetNews.yaml:68: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
api-level: ${{ matrix.api-level }}
arch: x86
Expand All @@ -75,7 +75,7 @@

- name: Upload test reports
if: always()
uses: actions/upload-artifact@v6

Check failure on line 78 in .github/workflows/JetNews.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

JetNews.yaml:78: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
name: test-reports-jetnews-${{ matrix.api-level }}
path: ${{ env.SAMPLE_PATH }}/app/build/reports/androidTests
2 changes: 1 addition & 1 deletion .github/workflows/Jetchat.yaml
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
name: Jetchat

Check warning on line 1 in .github/workflows/Jetchat.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

Jetchat.yaml:1: overly broad permissions: default permissions used due to no permissions: block

on:
push:
Expand All @@ -19,7 +19,7 @@
compose_key_alias: ${{ secrets.compose_key_alias }}
compose_key_password: ${{ secrets.compose_key_password }}
jobs:
build:

Check warning on line 22 in .github/workflows/Jetchat.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

Jetchat.yaml:22: overly broad permissions: default permissions used due to no permissions: block
uses: ./.github/workflows/build-sample.yml
with:
name: Jetchat
Expand All @@ -28,7 +28,7 @@
compose_store_password: ${{ secrets.COMPOSE_STORE_PASSWORD }}
compose_key_alias: ${{ secrets.COMPOSE_KEY_ALIAS }}
compose_key_password: ${{ secrets.COMPOSE_KEY_PASSWORD }}
test:

Check warning on line 31 in .github/workflows/Jetchat.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

Jetchat.yaml:31: overly broad permissions: default permissions used due to no permissions: block
needs: build
runs-on: ubuntu-latest
timeout-minutes: 30
Expand All @@ -44,7 +44,7 @@
run: mkdir -p ~/.gradle ; cp .github/ci-gradle.properties ~/.gradle/gradle.properties

- name: Set up JDK 17
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: 17
distribution: 'zulu'
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/Release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@
compose_key_alias: ${{ secrets.COMPOSE_KEY_ALIAS }}
compose_key_password: ${{ secrets.COMPOSE_KEY_PASSWORD }}
jobs:
build:

Check warning on line 12 in .github/workflows/Release.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

Release.yml:12: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-latest
timeout-minutes: 45

Expand All @@ -21,7 +21,7 @@
run: mkdir -p ~/.gradle ; cp .github/ci-gradle.properties ~/.gradle/gradle.properties

- name: Set up JDK 17
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: 17
distribution: 'zulu'
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/Reply.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@ jobs:
run: mkdir -p ~/.gradle ; cp .github/ci-gradle.properties ~/.gradle/gradle.properties

- name: Set up JDK 17
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: 17
distribution: 'zulu'
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/build-sample.yml
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@ jobs:
run: mkdir -p ~/.gradle ; cp .github/ci-gradle.properties ~/.gradle/gradle.properties

- name: Set up JDK 17
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: 17
distribution: 'zulu'
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/update_deps.yml
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ jobs:
- name: Copy CI gradle.properties
run: mkdir -p ~/.gradle ; cp .github/ci-gradle.properties ~/.gradle/gradle.properties
- name: set up JDK 17
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: 17
distribution: 'zulu'
Expand Down
Loading