Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/dependency-review.yml
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ jobs:
contents: read
steps:
- name: Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: Check if deny licenses are in sync
id: check-sync
Expand Down
18 changes: 9 additions & 9 deletions .github/workflows/pull-request-main.yml
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repo (needed to reference local action)
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
persist-credentials: false

Expand All @@ -26,7 +26,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repo (needed to reference local action)
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
persist-credentials: false

Expand All @@ -41,7 +41,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repo (needed to reference local action)
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
persist-credentials: false

Expand All @@ -59,7 +59,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repo (needed to reference local action)
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
# Commit back any changes based on the commit that triggered this action
# rather than merge commit of main into the PR branch
Expand Down Expand Up @@ -87,7 +87,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repo (needed to reference local action)
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
persist-credentials: false

Expand All @@ -103,7 +103,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repo (needed to reference local action)
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
persist-credentials: false

Expand All @@ -118,7 +118,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repo (needed to reference local action)
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
persist-credentials: false

Expand All @@ -133,7 +133,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repo (needed to reference local action)
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
persist-credentials: false

Expand All @@ -154,7 +154,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repo (needed to reference local action)
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
persist-credentials: false

Expand Down
10 changes: 5 additions & 5 deletions .github/workflows/push-main.yml
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repo (needed to reference local action)
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0

- name: ci-lint
uses: ./actions/ci-lint-ts
Expand All @@ -23,7 +23,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repo (needed to reference local action)
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
persist-credentials: false

Expand All @@ -38,7 +38,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repo (needed to reference local action)
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
persist-credentials: false

Expand All @@ -60,7 +60,7 @@ jobs:
actions: read
steps:
- name: Checkout repo (needed to reference local action)
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
fetch-depth: 0
persist-credentials: false
Expand All @@ -79,7 +79,7 @@ jobs:
actions: read
steps:
- name: Checkout repo (needed to reference local action)
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
fetch-depth: 0
persist-credentials: false
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/reusable-dependency-review.yml
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ jobs:
contents: read
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v5
with:
fetch-depth: 0
persist-credentials: false
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/reusable-docker-build-publish.yml
Original file line number Diff line number Diff line change
Expand Up @@ -247,12 +247,12 @@
docker-restore-cache: ${{ steps.should-cache.outputs.docker-restore-cache }}
docker-save-cache: ${{ steps.should-cache.outputs.docker-save-cache }}
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v5
with:
persist-credentials: false
fetch-depth: 1
ref: ${{ inputs.git-sha }}
- name: Get Date

Check warning

Code scanning / CodeQL

Checkout of untrusted code in trusted context Medium

Potential unsafe checkout of untrusted pull request on privileged workflow.
id: get-date
run: |
echo "Getting today's date..."
Expand Down Expand Up @@ -372,15 +372,15 @@
docker-image-sha-digest-arm64: ${{ steps.build.outputs.docker-image-sha-digest-arm64 }}
docker-manifest-tag: ${{ steps.set-docker-image-tags.outputs.docker-manifest-tag }}
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v5
id: checkout
with:
persist-credentials: false
fetch-depth: 1
ref: ${{ inputs.git-sha }}
# Generated tags must be compatible with:
# https://github.com/docker/metadata-action?tab=readme-ov-file#tags-input
- name: Set Docker image tags

Check warning

Code scanning / CodeQL

Checkout of untrusted code in trusted context Medium

Potential unsafe checkout of untrusted pull request on privileged workflow.
id: set-docker-image-tags
env:
DATE: ${{ needs.init.outputs.date }}
Expand Down
18 changes: 9 additions & 9 deletions .github/workflows/run-e2e-tests.yml
Original file line number Diff line number Diff line change
Expand Up @@ -389,7 +389,7 @@
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
persist-credentials: false
- name: Install citool
Expand Down Expand Up @@ -439,7 +439,7 @@
workflow_id: ${{ steps.gen_id.outputs.workflow_id }}
steps:
- name: Checkout code
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
persist-credentials: false

Expand Down Expand Up @@ -645,7 +645,7 @@

- name: Checkout the repo
if: ${{ steps.check-image-exists.outputs.exists != 'true' }}
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
persist-credentials: false
ref: ${{ inputs.chainlink_version }}
Expand Down Expand Up @@ -686,7 +686,7 @@
}}
steps:
- name: Checkout the repo
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
persist-credentials: false
ref: ${{ inputs.chainlink_version }}
Expand Down Expand Up @@ -745,7 +745,7 @@
uses: catchpoint/workflow-telemetry-action@94c3c3d9567a0205de6da68a76c428ce4e769af1 # v2.0.0

- name: Checkout repository
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
persist-credentials: false
ref: ${{ inputs.chainlink_version }}
Expand Down Expand Up @@ -1023,7 +1023,7 @@
}}.amazonaws.com/chainlink-tests
steps:
- name: Checkout repository
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
persist-credentials: false
- name: Build Test Runner Image
Expand Down Expand Up @@ -1092,7 +1092,7 @@
uses: catchpoint/workflow-telemetry-action@94c3c3d9567a0205de6da68a76c428ce4e769af1 # v2.0.0

- name: Checkout repository
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
persist-credentials: false

Expand Down Expand Up @@ -1248,7 +1248,7 @@
uses: runs-on/action@66d4449b717b5462159659523d1241051ff470b9 # v1

- name: Checkout repository
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
persist-credentials: false

Expand Down Expand Up @@ -1314,7 +1314,7 @@
# Needed for codeowners in Flakeguard
- name: Checkout repository
if: ${{ always() && env.FLAKEGUARD_ENABLE == 'true' }}
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
persist-credentials: false

Expand Down Expand Up @@ -1359,7 +1359,7 @@
GITHUB_RUN_ID: ${{ github.run_id }}
# If needed, override HEAD_REF or REF_NAME
GH_HEAD_REF: ${{ github.head_ref || github.ref_name }}
run: |

Check failure on line 1362 in .github/workflows/run-e2e-tests.yml

View workflow job for this annotation

GitHub Actions / actionlint

[actionlint] .github/workflows/run-e2e-tests.yml#L1362

shellcheck reported issue in this script: SC2155:warning:7:8: Declare and assign separately to avoid masking return values [shellcheck]
Raw output
.github/workflows/run-e2e-tests.yml:1362:9: shellcheck reported issue in this script: SC2155:warning:7:8: Declare and assign separately to avoid masking return values [shellcheck]
#!/usr/bin/env bash
set -euo pipefail

Expand Down Expand Up @@ -1524,7 +1524,7 @@
GH_EVENT_PULL_REQUEST_HEAD_SHA: ${{ github.event.pull_request.head.sha }}
FLAKEGUARD_SPLUNK_ENDPOINT: ${{ secrets.FLAKEGUARD_SPLUNK_ENDPOINT }}
FLAKEGUARD_SPLUNK_HEC: ${{ secrets.FLAKEGUARD_SPLUNK_HEC }}
run: |

Check failure on line 1527 in .github/workflows/run-e2e-tests.yml

View workflow job for this annotation

GitHub Actions / actionlint

[actionlint] .github/workflows/run-e2e-tests.yml#L1527

shellcheck reported issue in this script: SC2155:warning:4:8: Declare and assign separately to avoid masking return values [shellcheck]
Raw output
.github/workflows/run-e2e-tests.yml:1527:9: shellcheck reported issue in this script: SC2155:warning:4:8: Declare and assign separately to avoid masking return values [shellcheck]
set -euo pipefail

# Ensure flakeguard is on PATH
Expand Down Expand Up @@ -1597,7 +1597,7 @@
GH_EVENT_PULL_REQUEST_BASE_REF: ${{ github.event.pull_request.base.ref }}
GH_EVENT_PULL_REQUEST_HEAD_SHA: ${{ github.event.pull_request.head.sha }}
FAILED_LOGS_URL: ${{ steps.upload-failed-report-with-logs.outputs.artifact-url }}
run: |

Check failure on line 1600 in .github/workflows/run-e2e-tests.yml

View workflow job for this annotation

GitHub Actions / actionlint

[actionlint] .github/workflows/run-e2e-tests.yml#L1600

shellcheck reported issue in this script: SC2155:warning:5:8: Declare and assign separately to avoid masking return values [shellcheck]
Raw output
.github/workflows/run-e2e-tests.yml:1600:9: shellcheck reported issue in this script: SC2155:warning:5:8: Declare and assign separately to avoid masking return values [shellcheck]
#!/usr/bin/env bash
set -euo pipefail

Expand Down Expand Up @@ -1638,7 +1638,7 @@

- name: Add Github Summary For Main Flakeguard Report
if: ${{ env.FLAKEGUARD_ENABLE == 'true' && (success() || failure()) }}
run: |

Check failure on line 1641 in .github/workflows/run-e2e-tests.yml

View workflow job for this annotation

GitHub Actions / actionlint

[actionlint] .github/workflows/run-e2e-tests.yml#L1641

shellcheck reported issue in this script: SC2086:info:6:59: Double quote to prevent globbing and word splitting [shellcheck]
Raw output
.github/workflows/run-e2e-tests.yml:1641:9: shellcheck reported issue in this script: SC2086:info:6:59: Double quote to prevent globbing and word splitting [shellcheck]

Check failure on line 1641 in .github/workflows/run-e2e-tests.yml

View workflow job for this annotation

GitHub Actions / actionlint

[actionlint] .github/workflows/run-e2e-tests.yml#L1641

shellcheck reported issue in this script: SC2086:info:8:124: Double quote to prevent globbing and word splitting [shellcheck]
Raw output
.github/workflows/run-e2e-tests.yml:1641:9: shellcheck reported issue in this script: SC2086:info:8:124: Double quote to prevent globbing and word splitting [shellcheck]

Check failure on line 1641 in .github/workflows/run-e2e-tests.yml

View workflow job for this annotation

GitHub Actions / actionlint

[actionlint] .github/workflows/run-e2e-tests.yml#L1641

shellcheck reported issue in this script: SC2006:style:9:44: Use $(...) notation instead of legacy backticks `...` [shellcheck]
Raw output
.github/workflows/run-e2e-tests.yml:1641:9: shellcheck reported issue in this script: SC2006:style:9:44: Use $(...) notation instead of legacy backticks `...` [shellcheck]

Check failure on line 1641 in .github/workflows/run-e2e-tests.yml

View workflow job for this annotation

GitHub Actions / actionlint

[actionlint] .github/workflows/run-e2e-tests.yml#L1641

shellcheck reported issue in this script: SC2086:info:9:81: Double quote to prevent globbing and word splitting [shellcheck]
Raw output
.github/workflows/run-e2e-tests.yml:1641:9: shellcheck reported issue in this script: SC2086:info:9:81: Double quote to prevent globbing and word splitting [shellcheck]
FILE_SIZE=$(wc -c < ./flakeguard_run_report/main/all-test-summary.md)
echo "File size: $FILE_SIZE bytes"
SIZE_LIMIT=$((1024 * 1024))
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/schedule-renovate.yml
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ jobs:
actions: read
steps:
- name: Checkout repo (needed to reference local action)
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
fetch-depth: 0
persist-credentials: false
Expand Down
12 changes: 6 additions & 6 deletions .github/workflows/solidity-review-artifacts.yml
Original file line number Diff line number Diff line change
Expand Up @@ -141,7 +141,7 @@ jobs:
timeout-minutes: 10
steps:
- name: Checkout the caller repository
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
fetch-depth: 0
persist-credentials: false
Expand Down Expand Up @@ -207,7 +207,7 @@ jobs:
needs: [gather-basic-info]
steps:
- name: Checkout the caller repository
uses: actions/checkout@v4.2.2
uses: actions/checkout@v5.0.0
with:
ref: ${{ env.head_ref }}
persist-credentials: false
Expand Down Expand Up @@ -308,14 +308,14 @@ jobs:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
steps:
- name: Checkout caller repository
uses: actions/checkout@v4.2.2
uses: actions/checkout@v5.0.0
with:
fetch-depth: 0
ref: ${{ env.head_ref }}
persist-credentials: false

- name: Checkout .github repository
uses: actions/checkout@v4.2.2
uses: actions/checkout@v5.0.0
with:
repository: smartcontractkit/.github
ref: 65249c7eae628aad6e70a0c0850d981cd0074bf9
Expand Down Expand Up @@ -472,14 +472,14 @@ jobs:

- name: Checkout caller repository
if: ${{ inputs.link_with_jira == true }}
uses: actions/checkout@v4.2.2
uses: actions/checkout@v5.0.0
with:
ref: ${{ env.head_ref }}
persist-credentials: false

- name: Checkout chainlink-github-actions repository
if: ${{ inputs.link_with_jira == true }}
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
repository: smartcontractkit/.github
ref: 65249c7eae628aad6e70a0c0850d981cd0074bf9
Expand Down
2 changes: 1 addition & 1 deletion actions/beholder-pulumi-deploy-schema/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@ inputs:
runs:
using: "composite"
steps:
- uses: actions/checkout@v4.2.1
- uses: actions/checkout@v5.0.0

- name: Docker login to ECR
shell: bash
Expand Down
2 changes: 1 addition & 1 deletion actions/ci-beholder-validator/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ runs:
using: composite
steps:
- name: Checkout repo
uses: actions/checkout@v4.2.1
uses: actions/checkout@v5.0.0
with:
fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}

Expand Down
2 changes: 1 addition & 1 deletion actions/ci-benchmarking/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -53,7 +53,7 @@ runs:
using: "composite"
steps:
- name: Checkout Code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: Setup Go Environment
uses: actions/setup-go@v5
Expand Down
2 changes: 1 addition & 1 deletion actions/ci-kubeconform/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@ runs:
steps:
- name: Checkout repo
if: inputs.checkout-repo == 'true'
uses: actions/checkout@v4
uses: actions/checkout@v5
with:
fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}

Expand Down
2 changes: 1 addition & 1 deletion actions/ci-lint-charts/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ runs:
steps:
- name: Checkout repo
if: inputs.checkout-repo == 'true'
uses: actions/checkout@v4
uses: actions/checkout@v5
with:
fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}

Expand Down
2 changes: 1 addition & 1 deletion actions/ci-lint-go/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -73,7 +73,7 @@ runs:
steps:
- name: Checkout repo
if: inputs.checkout-repo == 'true'
uses: actions/checkout@v4
uses: actions/checkout@v5
with:
fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}

Expand Down
2 changes: 1 addition & 1 deletion actions/ci-lint-misc/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ runs:
steps:
- name: Checkout repo
if: inputs.checkout-repo == 'true'
uses: actions/checkout@v4
uses: actions/checkout@v5
with:
fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}

Expand Down
2 changes: 1 addition & 1 deletion actions/ci-lint-ts/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ runs:
steps:
- name: Checkout repo
if: inputs.checkout-repo == 'true'
uses: actions/checkout@v4
uses: actions/checkout@v5
with:
fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}

Expand Down
2 changes: 1 addition & 1 deletion actions/ci-prettier/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ runs:
steps:
- name: Checkout repo
if: inputs.checkout-repo == 'true'
uses: actions/checkout@v4
uses: actions/checkout@v5
with:
fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}

Expand Down
2 changes: 1 addition & 1 deletion actions/ci-sonarqube-go/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,7 @@ runs:
steps:
- name: Checkout repo
if: inputs.checkout-repo == 'true'
uses: actions/checkout@v4
uses: actions/checkout@v5
with:
fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}

Expand Down
Loading
Loading