From 44a6a618689766af44d4d85a38102ddf87cf43aa Mon Sep 17 00:00:00 2001 From: katsugtgz Date: Mon, 10 Aug 2026 13:32:44 +0700 Subject: [PATCH 1/4] ci: update checkout and setup-python to current versions --- .github/workflows/test.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 570a087a..f71c902a 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -32,10 +32,10 @@ jobs: python-version: ["3.7", "3.8", "3.9", "3.10"] steps: - name: Checkout repository - uses: actions/checkout@v3 + uses: actions/checkout@v4 - name: Setup Python - uses: "actions/setup-python@v3" + uses: "actions/setup-python@v5" with: python-version: "${{ matrix.python-version }}" From 8b0ba4cce550f1c586a9bf22f74dea4e867b2e3c Mon Sep 17 00:00:00 2001 From: Muhammad Naufal Mahdi Date: Mon, 17 Aug 2026 22:41:27 +0700 Subject: [PATCH 2/4] ci: update actions/checkout to v7 --- .github/workflows/test.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index f71c902a..d7e8d2eb 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -32,7 +32,7 @@ jobs: python-version: ["3.7", "3.8", "3.9", "3.10"] steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup Python uses: "actions/setup-python@v5" From 0f11ccb8fdcb66ee03f03887259be90c96602de6 Mon Sep 17 00:00:00 2001 From: katsugtgz Date: Tue, 18 Aug 2026 15:22:08 +0700 Subject: [PATCH 3/4] ci: pin actions to commit SHAs for zizmor unpinned-uses policy --- .github/workflows/test.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index d7e8d2eb..e0c63b61 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -32,10 +32,10 @@ jobs: python-version: ["3.7", "3.8", "3.9", "3.10"] steps: - name: Checkout repository - uses: actions/checkout@v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Python - uses: "actions/setup-python@v5" + uses: "actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97" # v7.0.0 with: python-version: "${{ matrix.python-version }}" From d8448ac91d6e7e69a8c6ca9d3a94bd230dea7d6f Mon Sep 17 00:00:00 2001 From: katsugtgz Date: Tue, 18 Aug 2026 15:24:45 +0700 Subject: [PATCH 4/4] ci: add least-privilege permissions block to test workflow --- .github/workflows/test.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index e0c63b61..84cf5d3e 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -23,6 +23,9 @@ on: push: branches: ['*'] +permissions: + contents: read + jobs: matrix: name: "Run tests on Python ${{ matrix.python-version }}"