Skip to content

fix vulnerability

fix vulnerability #521

Workflow file for this run

name: build
on:
push:
branches:
- main
paths-ignore:
- '**/README.md'
- 'smoke-tests/matrix'
pull_request_target:
branches:
- main
jobs:
build:
runs-on: ubuntu-20.04
steps:
# Set fetch-depth: 0 to fetch commit history and tags for use in version calculation
- name: Check out code
uses: actions/checkout@v2.3.4
with:
ref: ${{github.event.pull_request.head.ref}}
repository: ${{github.event.pull_request.head.repo.full_name}}
fetch-depth: 0
submodules: true
- name: create checksum file
uses: hypertrace/github-actions/checksum@main
- name: Cache packages
id: cache-packages
uses: actions/cache@v2
with:
path: ~/.gradle
key: gradle-packages-${{ runner.os }}-${{ github.job }}-${{ hashFiles('**/checksum.txt') }}
restore-keys: |
gradle-packages-${{ runner.os }}-${{ github.job }}
gradle-packages-${{ runner.os }}
- name: build
run: make build
env:
JVM_OPTS: -Xmx1g
TERM: dumb
muzzle:
runs-on: ubuntu-20.04
steps:
- name: Check out code
uses: actions/checkout@v2.3.4
with:
ref: ${{github.event.pull_request.head.ref}}
repository: ${{github.event.pull_request.head.repo.full_name}}
fetch-depth: 0
submodules: true
- name: create checksum file
uses: hypertrace/github-actions/checksum@main
- name: Cache packages
id: cache-packages
uses: actions/cache@v2
with:
path: ~/.gradle
key: gradle-packages-${{ runner.os }}-${{ github.job }}-${{ hashFiles('**/checksum.txt') }}
restore-keys: |
gradle-packages-${{ runner.os }}-${{ github.job }}
gradle-packages-${{ runner.os }}
- name: muzzle
run: make muzzle
env:
JVM_OPTS: -Xmx1g
TERM: dumb
#TODO
# dependency-check:
# runs-on: ubuntu-20.04
# steps:
# - name: Check out code
# uses: actions/checkout@v2.3.4
# with:
# ref: ${{github.event.pull_request.head.ref}}
# repository: ${{github.event.pull_request.head.repo.full_name}}
# fetch-depth: 0
# submodules: true
#
# - name: create checksum file
# uses: hypertrace/github-actions/checksum@main
#
# - name: Cache packages
# id: cache-packages
# uses: actions/cache@v2
# with:
# path: ~/.gradle
# key: gradle-packages-${{ runner.os }}-${{ github.job }}-${{ hashFiles('**/checksum.txt') }}
# restore-keys: |
# gradle-packages-${{ runner.os }}-${{ github.job }}
# gradle-packages-${{ runner.os }}
#
# - name: dependency check
# run: make dependency-check
# env:
# JVM_OPTS: -Xmx1g
# TERM: dumb