diff --git a/.github/workflows/supply-chain.yml b/.github/workflows/prerelease.yml similarity index 55% rename from .github/workflows/supply-chain.yml rename to .github/workflows/prerelease.yml index b16ea59..961acbc 100644 --- a/.github/workflows/supply-chain.yml +++ b/.github/workflows/prerelease.yml @@ -1,18 +1,21 @@ +# Portions of this file contributed by NIST are governed by the following +# statement: +# # This software was developed at the National Institute of Standards # and Technology by employees of the Federal Government in the course -# of their official duties. Pursuant to title 17 Section 105 of the -# United States Code this software is not subject to copyright -# protection and is in the public domain. NIST assumes no -# responsibility whatsoever for its use by other parties, and makes -# no guarantees, expressed or implied, about its quality, -# reliability, or any other characteristic. +# of their official duties. Pursuant to Title 17 Section 105 of the +# United States Code, this software is not subject to copyright +# protection within the United States. NIST assumes no responsibility +# whatsoever for its use by other parties, and makes no guarantees, +# expressed or implied, about its quality, reliability, or any other +# characteristic. # # We would appreciate acknowledgement if the software is used. # This workflow uses Make to review direct dependencies of this # repository. -name: Supply Chain +name: Prerelease on: schedule: @@ -29,12 +32,10 @@ jobs: - '3.11' steps: - - uses: actions/checkout@v3 - with: - ref: develop + - uses: actions/checkout@v4 - name: Set up Python ${{ matrix.python-version }} uses: actions/setup-python@v4 with: python-version: ${{ matrix.python-version }} - name: Review dependencies - run: make check-supply-chain + run: make check-supply-chain-pre-commit diff --git a/Makefile b/Makefile index a1c7975..3d49e68 100644 --- a/Makefile +++ b/Makefile @@ -70,6 +70,7 @@ check: \ check-supply-chain: \ check-supply-chain-pre-commit +# This target is scheduled to run as part of prerelease review. check-supply-chain-pre-commit: \ .venv-pre-commit/var/.pre-commit-built.log source .venv-pre-commit/bin/activate \