diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 669471a7e0e..4b4ec73b572 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -30,6 +30,8 @@ jobs: steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + with: + persist-credentials: false - uses: tj-actions/changed-files@bab30c2299617f6615ec02a68b9a40d10bd21366 # v45.0.5 id: changed-files-non-js @@ -97,6 +99,8 @@ jobs: steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + with: + persist-credentials: false - run: rustup component add rustfmt - run: rustup component add clippy @@ -115,10 +119,12 @@ jobs: steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + with: + persist-credentials: false - uses: Swatinem/rust-cache@82a92a6e8fbeee089604da2575dc567ae9ddeaab # v2.7.5 - - run: cargo install cargo-deny --vers ${{ env.CARGO_DENY_VERSION }} + - run: cargo install cargo-deny --vers ${CARGO_DENY_VERSION} - run: cargo deny check backend-test: @@ -136,6 +142,9 @@ jobs: steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + with: + persist-credentials: false + - uses: Swatinem/rust-cache@82a92a6e8fbeee089604da2575dc567ae9ddeaab # v2.7.5 with: # Ensure that we cache from the right target directory. (See below @@ -143,26 +152,26 @@ jobs: workspaces: '. -> ${{ env.CARGO_TARGET_DIR }}' # Update `pg_dump` to the same version as the running PostgreSQL server - - run: sudo /usr/share/postgresql-common/pgdg/apt.postgresql.org.sh -v ${{ env.POSTGRES_VERSION }} -i -p + - run: sudo /usr/share/postgresql-common/pgdg/apt.postgresql.org.sh -v ${POSTGRES_VERSION} -i -p - run: sudo systemctl start postgresql.service - run: sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD 'postgres'" # Create a working directory on /mnt, which is a larger temporary # filesystem than /, that we can then point our later commands to. - run: | - sudo mkdir ${{ env.CARGO_TARGET_DIR }} - sudo chown $(id -u):$(id -g) ${{ env.CARGO_TARGET_DIR }} + sudo mkdir ${CARGO_TARGET_DIR} + sudo chown $(id -u):$(id -g) ${CARGO_TARGET_DIR} - run: cargo build --tests --workspace - run: cargo test --workspace - - run: curl -sL https://github.com/mozilla/grcov/releases/download/v${{ env.GRCOV_VERSION }}/grcov-x86_64-unknown-linux-gnu.tar.bz2 | tar xjf - + - run: curl -sL https://github.com/mozilla/grcov/releases/download/v${GRCOV_VERSION}/grcov-x86_64-unknown-linux-gnu.tar.bz2 | tar xjf - - run: rustup component add llvm-tools - - run: ./grcov . --binary-path ${{ env.CARGO_TARGET_DIR }}/debug/ -s . -t lcov --branch --ignore-not-existing --ignore "/*" --ignore "${{ env.CARGO_TARGET_DIR }}/debug/build/**" -o ${{ env.CARGO_TARGET_DIR }}/coverage.lcov + - run: ./grcov . --binary-path ${CARGO_TARGET_DIR}/debug/ -s . -t lcov --branch --ignore-not-existing --ignore "/*" --ignore "${CARGO_TARGET_DIR}/debug/build/**" -o ${CARGO_TARGET_DIR}/coverage.lcov - uses: codecov/codecov-action@7f8b4b4bde536c465e797be725718b88c5d95e0e # v5.1.1 with: - files: ${{ env.CARGO_TARGET_DIR }}/coverage.lcov + files: ${CARGO_TARGET_DIR}/coverage.lcov env: CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} @@ -174,6 +183,8 @@ jobs: steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + with: + persist-credentials: false - uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0 with: @@ -208,6 +219,8 @@ jobs: steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + with: + persist-credentials: false - uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0 with: @@ -244,6 +257,8 @@ jobs: steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + with: + persist-credentials: false - uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0 with: diff --git a/.github/workflows/smoke-test.yml b/.github/workflows/smoke-test.yml index a4f39c22e57..670e325565b 100644 --- a/.github/workflows/smoke-test.yml +++ b/.github/workflows/smoke-test.yml @@ -16,6 +16,9 @@ jobs: steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + with: + persist-credentials: false + - uses: Swatinem/rust-cache@82a92a6e8fbeee089604da2575dc567ae9ddeaab # v2.7.5 - run: cargo build --package crates_io_smoke_test - run: cargo run --package crates_io_smoke_test --quiet