Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -50,6 +50,8 @@ jobs:
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
with:
version: "0.12.5"
enable-cache: false
ignore-empty-workdir: true
- name: Run published credential-free demo without checkout
shell: pwsh
run: |
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/codeql.yml
Original file line number Diff line number Diff line change
Expand Up @@ -20,10 +20,10 @@ jobs:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- uses: github/codeql-action/init@42947a340483f03ba47bb1a039b2c519aab3df85 # v3
- uses: github/codeql-action/init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4
with:
languages: python
build-mode: none
- uses: github/codeql-action/analyze@42947a340483f03ba47bb1a039b2c519aab3df85 # v3
- uses: github/codeql-action/analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4
with:
category: "/language:python"
6 changes: 4 additions & 2 deletions tests/test_github_workflows.py
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,8 @@ def test_windows_no_clone_demo_uses_the_published_package() -> None:

assert "runs-on: windows-latest" in windows_job
assert "actions/checkout@" not in windows_job
assert "enable-cache: false" in windows_job
assert "ignore-empty-workdir: true" in windows_job
assert 'uvx --from "ragops==2.0.1" ragops demo' in windows_job
assert '$summary.candidate_decision -ne "BLOCK"' in windows_job
assert "demo-output/release-report.html" in windows_job
Expand All @@ -47,11 +49,11 @@ def test_codeql_is_least_privilege_and_immutably_pinned() -> None:
assert "build-mode: none" in workflow
assert workflow.count(
"github/codeql-action/"
"init@42947a340483f03ba47bb1a039b2c519aab3df85"
"init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28"
) == 1
assert workflow.count(
"github/codeql-action/"
"analyze@42947a340483f03ba47bb1a039b2c519aab3df85"
"analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28"
) == 1


Expand Down