Pin github workflows to a commit hash instead of version tag for security purpose #1
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "GRDB CI" | |
| on: | |
| push: | |
| branches: | |
| - master | |
| - development | |
| paths: | |
| - 'GRDB/**' | |
| - 'Tests/**' | |
| - '.github/workflows/**' | |
| - 'Package.swift' | |
| pull_request: | |
| paths: | |
| - 'GRDB/**' | |
| - 'Tests/**' | |
| - '.github/workflows/**' | |
| - 'Package.swift' | |
| concurrency: | |
| group: ${{ github.ref_name }} | |
| cancel-in-progress: true | |
| permissions: | |
| contents: read | |
| jobs: | |
| macOS: | |
| name: macOS | |
| runs-on: ${{ matrix.runsOn }} | |
| timeout-minutes: 60 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - xcode: "Xcode_14.0.1.app" | |
| runsOn: macOS-12 | |
| name: "macOS 12, Xcode 14.0.1, Swift 5.7" | |
| shell: "/bin/zsh {0}" | |
| steps: | |
| - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 | |
| - name: ${{ matrix.name }} | |
| run: make test_framework_GRDBOSX_maxSwift | |
| iOS: | |
| name: iOS | |
| runs-on: ${{ matrix.runsOn }} | |
| timeout-minutes: 60 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - xcode: "Xcode_14.0.1.app" | |
| runsOn: macOS-12 | |
| name: "macOS 12, Xcode 14.0.1, Swift 5.7" | |
| shell: "/bin/zsh {0}" | |
| steps: | |
| - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 | |
| - name: ${{ matrix.name }} | |
| run: make test_framework_GRDBiOS_maxTarget_maxSwift | |
| SPM: | |
| name: SPM | |
| runs-on: ${{ matrix.runsOn }} | |
| timeout-minutes: 60 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - xcode: "Xcode_14.0.1.app" | |
| runsOn: macOS-12 | |
| name: "macOS 12, Xcode 14.0.1, Swift 5.7" | |
| shell: "/bin/zsh {0}" | |
| steps: | |
| - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 | |
| - name: ${{ matrix.name }} | |
| run: make test_SPM test_install_SPM | |
| SQLCipher3: | |
| name: SQLCipher3 | |
| runs-on: ${{ matrix.runsOn }} | |
| timeout-minutes: 60 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - xcode: "Xcode_14.0.1.app" | |
| runsOn: macOS-12 | |
| name: "macOS 12, Xcode 14.0.1, Swift 5.7" | |
| shell: "/bin/zsh {0}" | |
| steps: | |
| - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 | |
| - name: ${{ matrix.name }} | |
| run: make test_framework_SQLCipher3Encrypted | |
| SQLCipher4: | |
| name: SQLCipher4 | |
| runs-on: ${{ matrix.runsOn }} | |
| timeout-minutes: 60 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - xcode: "Xcode_14.0.1.app" | |
| runsOn: macOS-12 | |
| name: "macOS 12, Xcode 14.0.1, Swift 5.7" | |
| shell: "/bin/zsh {0}" | |
| steps: | |
| - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 | |
| - name: ${{ matrix.name }} | |
| run: make test_framework_SQLCipher4Encrypted | |
| CustomSQLite: | |
| name: CustomSQLite | |
| runs-on: ${{ matrix.runsOn }} | |
| timeout-minutes: 60 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - xcode: "Xcode_14.0.1.app" | |
| runsOn: macOS-12 | |
| name: "macOS 12, Xcode 14.0.1, Swift 5.7" | |
| shell: "/bin/zsh {0}" | |
| steps: | |
| - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 | |
| - name: ${{ matrix.name }} | |
| run: make test_framework_GRDBCustomSQLiteOSX | |
| XCFramework: | |
| name: XCFramework | |
| runs-on: ${{ matrix.runsOn }} | |
| timeout-minutes: 60 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - xcode: "Xcode_14.0.1.app" | |
| runsOn: macOS-12 | |
| name: "macOS 12, Xcode 14.0.1, Swift 5.7" | |
| shell: "/bin/zsh {0}" | |
| steps: | |
| - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 | |
| - name: ${{ matrix.name }} | |
| run: make test_archive_GRDBOSX_xcframework | |