Bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 #798
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "Build and Validate" | |
| env: | |
| CAKE_TARGET: "BuildAll" | |
| CAKE_VERBOSITY: "Normal" | |
| RELEASE_MODE: "Beta" | |
| RUN_TESTS: "true" | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }} | |
| cancel-in-progress: true | |
| permissions: {} | |
| on: | |
| push: | |
| branches: | |
| - "develop" | |
| - "release/*" | |
| pull_request: | |
| branches: | |
| - "develop" | |
| - "release/*" | |
| merge_group: | |
| types: | |
| - "checks_requested" | |
| workflow_dispatch: | |
| inputs: | |
| CAKE_TARGET: | |
| description: "Cake Target" | |
| type: "string" | |
| default: "BuildAll" | |
| CAKE_VERBOSITY: | |
| description: "Cake Verbosity" | |
| type: "choice" | |
| default: "Normal" | |
| options: | |
| - "Quiet" | |
| - "Minimal" | |
| - "Normal" | |
| - "Verbose" | |
| - "Diagnostic" | |
| RELEASE_MODE: | |
| description: "Release Mode" | |
| type: "choice" | |
| default: "Beta" | |
| options: | |
| - "Alpha" | |
| - "Beta" | |
| - "RC" | |
| - "Stable" | |
| RUN_TESTS: | |
| description: "Run Tests?" | |
| type: boolean | |
| default: true | |
| jobs: | |
| build-and-validate: | |
| name: "Build and Validate" | |
| runs-on: "windows-2025-vs2026" | |
| permissions: | |
| checks: "write" # needed by EnricoMi/publish-unit-test-result-action | |
| pull-requests: "write" # needed by EnricoMi/publish-unit-test-result-action | |
| defaults: | |
| run: | |
| shell: "pwsh" | |
| steps: | |
| - name: "Setup Environment Variables" | |
| run: | | |
| "CAKE_TARGET=$env:CAKE_TARGET" >> $env:GITHUB_ENV; | |
| "CAKE_VERBOSITY=$env:CAKE_VERBOSITY" >> $env:GITHUB_ENV; | |
| "RELEASE_MODE=$env:RELEASE_MODE" >> $env:GITHUB_ENV; | |
| "RUN_TESTS=$env:RUN_TESTS" >> $env:GITHUB_ENV; | |
| env: | |
| CAKE_TARGET: ${{ inputs.CAKE_TARGET || env.CAKE_TARGET }} | |
| CAKE_VERBOSITY: ${{ inputs.CAKE_VERBOSITY || env.CAKE_VERBOSITY }} | |
| RELEASE_MODE: ${{ inputs.RELEASE_MODE || env.RELEASE_MODE }} | |
| RUN_TESTS: ${{ inputs.RUN_TESTS || env.RUN_TESTS }} | |
| - name: "Checkout" | |
| uses: "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1" # v7.0.1 | |
| with: | |
| fetch-depth: 0 # include all history for GitVersion | |
| persist-credentials: false | |
| - name: "Setup Node.js" | |
| uses: "actions/setup-node@820762786026740c76f36085b0efc47a31fe5020" # v7.0.0 | |
| with: | |
| node-version-file: ".node-version" | |
| package-manager-cache: false | |
| - name: "Enable Corepack" | |
| run: "corepack enable" | |
| - name: "Setup .NET SDK" | |
| uses: "actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68" # v6.0.0 | |
| with: | |
| global-json-file: "global.json" | |
| - name: "Initialize Git User" | |
| run: | | |
| git config --global user.email 'noreply@dnncommunity.org'; | |
| git config --global user.name 'DNN Platform CI Bot'; | |
| - name: "Update Alpha/Beta/Stable flag" | |
| run: | | |
| $path = '.\DNN Platform\Library\Properties\AssemblyInfo.cs' | |
| $pattern3 = '\[assembly: AssemblyStatus' | |
| (Get-Content $path) | ForEach-Object { | |
| if ($_ -match $pattern3) { | |
| # We have found the matching line | |
| '[assembly: AssemblyStatus(ReleaseMode.{0})]' -f $env:RELEASE_MODE | |
| } else { | |
| $_ | |
| } | |
| } | Set-Content $path | |
| - name: "Run DNN Build via Cake" | |
| run: "./build.ps1 --target=$env:CAKE_TARGET --verbosity=$env:CAKE_VERBOSITY" | |
| - name: "Run Unit Tests via Cake" | |
| if: ${{ env.RUN_TESTS == 'true' }} | |
| run: "./build.ps1 --target=UnitTests --verbosity=$env:CAKE_VERBOSITY" | |
| continue-on-error: true | |
| - name: "Publish Test Results" | |
| uses: "EnricoMi/publish-unit-test-result-action/windows@d0a4676d0e0b938bc201470d88276b7c74c712b3" # v2.24.0 | |
| if: ${{ !cancelled() && env.RUN_TESTS == 'true' }} | |
| with: | |
| files: "**/TestResults/*.trx" | |
| action_fail: true | |
| - name: "Publish Artifacts" | |
| id: "publish-artifacts-step" | |
| uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # v7.0.1 | |
| if: ${{ !cancelled() }} | |
| with: | |
| path: "Artifacts" | |
| if-no-files-found: "error" | |
| compression-level: "0" | |
| overwrite: true | |
| - name: "Create GitHub Pull Request" | |
| if: ${{ success() && github.event_name == 'push' && (github.ref_name == 'develop' || startsWith('release/', github.ref_name)) }} | |
| run: "./build.ps1 --target=CreateGitHubPullRequest --verbosity=$env:CAKE_VERBOSITY" | |
| env: | |
| GITHUB_APP_ID: ${{ secrets.GITHUB_APP_ID }} | |
| GITHUB_APP_PRIVATE_KEY: ${{ secrets.GITHUB_APP_PRIVATE_KEY }} | |
| outputs: | |
| artifact-id: ${{ steps.publish-artifacts-step.outputs.artifact-id }} | |
| attest-artifacts: | |
| name: "Attest Artifacts" | |
| needs: ["build-and-validate"] | |
| if: ${{ github.event_name == 'workflow_dispatch' }} | |
| runs-on: "ubuntu-latest" | |
| permissions: | |
| id-token: "write" # needed by actions/attest | |
| contents: "read" | |
| attestations: "write" # needed by actions/attest | |
| steps: | |
| - name: "Download Artifacts" | |
| uses: "actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c" # v8.0.1 | |
| with: | |
| artifact-ids: ${{ needs.build-and-validate.outputs.artifact-id }} | |
| - name: "Generate artifact attestations" | |
| uses: "actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6" # v4.2.0 | |
| with: | |
| subject-path: | | |
| *.nupkg | |
| *.snupkg | |
| *.zip | |
| deploy-to-nuget: | |
| name: "Deploy to NuGet" | |
| needs: ["build-and-validate"] | |
| environment: "nuget.org" | |
| if: ${{ github.event_name == 'workflow_dispatch' }} | |
| runs-on: "ubuntu-latest" | |
| permissions: | |
| id-token: "write" # needed by NuGet/login | |
| defaults: | |
| run: | |
| shell: "pwsh" | |
| steps: | |
| - name: "Download Artifacts" | |
| uses: "actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c" # v8.0.1 | |
| with: | |
| artifact-ids: ${{ needs.build-and-validate.outputs.artifact-id }} | |
| - name: "NuGet login (OIDC → temp API key)" | |
| uses: "NuGet/login@8d196754b4036150537f80ac539e15c2f1028841" # v1.2.0 | |
| id: "nuget-login" | |
| with: | |
| user: ${{ secrets.NUGET_USER }} | |
| - name: "NuGet Push" | |
| run: "dotnet nuget push *.nupkg --api-key $env:NUGET_API_KEY --source https://api.nuget.org/v3/index.json" | |
| env: | |
| NUGET_API_KEY: ${{ steps.nuget-login.outputs.NUGET_API_KEY }} | |