GeezerVison is showing github.com — Zizmor hardening · sysfce2/python-matplotlib-inline@8d45c8f
File tree
Expand file treeCollapse file tree
Open diff view settings
Expand file treeCollapse file tree
Open diff view settings
Collapse file
Copy file name to clipboardExpand all lines: .github/dependabot.yml +4Lines changed: 4 additions & 0 deletions | Original file line number | Diff line number | Diff line change |
|---|
|
7 | 7 | directory: "/" # Location of package manifests |
8 | 8 | schedule: |
9 | 9 | interval: "monthly" |
| 10 | + cooldown: |
| 11 | + default-days: 7 |
10 | 12 | - package-ecosystem: "github-actions" |
11 | 13 | directory: "/" |
12 | 14 | schedule: |
@@ -15,3 +17,5 @@ updates: |
15 | 17 | actions: |
16 | 18 | patterns: |
17 | 19 | - "*" |
| 20 | + cooldown: |
| 21 | + default-days: 7 |
Collapse file
Copy file name to clipboardExpand all lines: .github/workflows/main.yml +7-2Lines changed: 7 additions & 2 deletions | Original file line number | Diff line number | Diff line change |
|---|
|
6 | 6 | - main |
7 | 7 | pull_request: |
8 | 8 |
|
| 9 | +permissions: |
| 10 | + contents: read |
| 11 | + |
9 | 12 | defaults: |
10 | 13 | run: |
11 | 14 | shell: bash -l {0} |
@@ -31,10 +34,12 @@ jobs: |
31 | 34 |
|
32 | 35 | steps: |
33 | 36 | - name: Checkout |
34 | | - uses: actions/checkout@v5 |
| 37 | + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5 |
| 38 | + with: |
| 39 | + persist-credentials: false |
35 | 40 |
|
36 | 41 | - name: Setup Python ${{ matrix.python-version }} |
37 | | - uses: actions/setup-python@v6 |
| 42 | + uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 |
38 | 43 | with: |
39 | 44 | python-version: ${{ matrix.python-version }} |
40 | 45 |
|
|
Collapse file
Copy file name to clipboardExpand all lines: .github/workflows/publish.yml +6-4Lines changed: 6 additions & 4 deletions | Original file line number | Diff line number | Diff line change |
|---|
@@ -16,10 +16,12 @@ jobs: |
16 | 16 | permissions: |
17 | 17 | id-token: write |
18 | 18 | steps: |
19 | | - - uses: actions/checkout@v5 |
20 | | - |
| 19 | + - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5 |
| 20 | + with: |
| 21 | + persist-credentials: false |
| 22 | + |
21 | 23 | - name: Set up Python |
22 | | - uses: actions/setup-python@v6 |
| 24 | + uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 |
23 | 25 | with: |
24 | 26 | python-version: '3.x' |
25 | 27 | - name: Install dependencies |
|
31 | 33 | - name: Install built wheel |
32 | 34 | run: pip install dist/*.whl |
33 | 35 | - name: Echo current tag |
34 | | - run: echo ${{ github.ref }} |
| 36 | + run: echo "$GITHUB_REF" |
35 | 37 | - name: Get package version |
36 | 38 | run: | |
37 | 39 | export PACKAGE_VERSION=$(python -c 'import matplotlib_inline; print(matplotlib_inline.__version__)') |
|