Rebuild committed HTML docs to show version 2.1.10. (#386) #49
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: supply-chain.yml | |
| permissions: | |
| contents: read | |
| actions: read # Required for setup-uv and other actions to read action metadata | |
| env: | |
| FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true" | |
| UV_VERSION: "0.11.21" | |
| UV_PROJECT_ENVIRONMENT: venv | |
| PIP_AUDIT_VERSION: "2.10.0" | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.head_ref || github.ref }} | |
| cancel-in-progress: true | |
| on: | |
| workflow_dispatch: {} | |
| push: | |
| branches: [master] | |
| pull_request: | |
| branches: [master] | |
| jobs: | |
| lockfile: | |
| name: Verify lockfile | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out repository | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Set up uv | |
| uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 | |
| with: | |
| version: ${{ env.UV_VERSION }} | |
| - name: Check uv.lock is up to date | |
| run: uv lock --check | |
| osv-scanner: | |
| name: OSV dependency scan | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out repository | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Run OSV-Scanner | |
| uses: google/osv-scanner-action/osv-scanner-action@8deb546fdb875b9996d27d4950be7312dac076a1 # v2.5.0 | |
| with: | |
| scan-args: --lockfile=uv.lock | |
| pip-audit: | |
| name: pip-audit dependency scan | |
| needs: lockfile | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out repository | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Set up Python | |
| uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 | |
| with: | |
| python-version-file: .python-version | |
| - name: Set up uv | |
| uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 | |
| with: | |
| version: ${{ env.UV_VERSION }} | |
| - name: Sync dependencies (locked) | |
| run: uv sync --locked --extra dev | |
| - name: Export requirements for pip-audit | |
| run: uv export --locked --extra dev --no-emit-project -o requirements-audit.txt | |
| - name: Run pip-audit | |
| env: | |
| PIP_AUDIT_VERSION: ${{ env.PIP_AUDIT_VERSION }} | |
| run: uvx pip-audit==${PIP_AUDIT_VERSION} -r requirements-audit.txt |