Merge pull request #54 from casework/reschedule_pre_commit_refreshing

Review pre-commit pinned versions as prerelease step

Author: ajnelson-nist

.github/workflows/supply-chain.yml renamed to .github/workflows/prerelease.yml

@@ -1,18 +1,21 @@
+# Portions of this file contributed by NIST are governed by the following
+# statement:
+#
 # This software was developed at the National Institute of Standards
 # and Technology by employees of the Federal Government in the course
-# of their official duties. Pursuant to title 17 Section 105 of the
-# United States Code this software is not subject to copyright
-# protection and is in the public domain. NIST assumes no
-# responsibility whatsoever for its use by other parties, and makes
-# no guarantees, expressed or implied, about its quality,
-# reliability, or any other characteristic.
+# of their official duties. Pursuant to Title 17 Section 105 of the
+# United States Code, this software is not subject to copyright
+# protection within the United States. NIST assumes no responsibility
+# whatsoever for its use by other parties, and makes no guarantees,
+# expressed or implied, about its quality, reliability, or any other
+# characteristic.
 #
 # We would appreciate acknowledgement if the software is used.
 
 # This workflow uses Make to review direct dependencies of this
 # repository.
 
-name: Supply Chain
+name: Prerelease
 
 on:
   schedule:
@@ -29,12 +32,10 @@ jobs:
           - '3.11'
 
     steps:
-    - uses: actions/checkout@v3
-      with:
-        ref: develop
+    - uses: actions/checkout@v4
     - name: Set up Python ${{ matrix.python-version }}
       uses: actions/setup-python@v4
       with:
         python-version: ${{ matrix.python-version }}
     - name: Review dependencies
-      run: make check-supply-chain
+      run: make check-supply-chain-pre-commit

Makefile

@@ -70,6 +70,7 @@ check: \
 check-supply-chain: \
   check-supply-chain-pre-commit
 
+# This target is scheduled to run as part of prerelease review.
 check-supply-chain-pre-commit: \
   .venv-pre-commit/var/.pre-commit-built.log
 	source .venv-pre-commit/bin/activate \