Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 7 additions & 7 deletions .github/workflows/analyze.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@
# See the License for the specific language governing permissions and
# limitations under the License.

name: Run code analysis

Check warning on line 15 in .github/workflows/analyze.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

analyze.yaml:15: overly broad permissions: default permissions used due to no permissions: block
on:
pull_request:
push:
Expand All @@ -24,33 +24,33 @@
cancel-in-progress: true

jobs:
flutter-analyze:

Check warning on line 27 in .github/workflows/analyze.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

analyze.yaml:27: overly broad permissions: default permissions used due to no permissions: block
timeout-minutes: 45
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup flutter
uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2
with:
flutter-version: "3.38.x"
channel: "stable"
cache: true
- name: Setup melos
uses: bluefireteam/melos-action@6085791af7036f6366c9a4b9d55105c0ef9c6388
uses: bluefireteam/melos-action@0b6c80d9846e6b1841c97d527ceb37e17db23f56
with:
melos-version: "6.3.2"
- name: "Run Flutter Analyze"
run: melos run flutter-analyze

format:

Check warning on line 46 in .github/workflows/analyze.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

analyze.yaml:46: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-latest
timeout-minutes: 20
steps:
- name: Checkout code
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup java
uses: actions/setup-java@v4
uses: actions/setup-java@v6

Check failure on line 53 in .github/workflows/analyze.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 53 in .github/workflows/analyze.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

analyze.yaml:53: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
distribution: "temurin"
java-version: "17"
Expand All @@ -62,11 +62,11 @@
channel: "stable"
cache: true
- name: Setup melos
uses: bluefireteam/melos-action@6085791af7036f6366c9a4b9d55105c0ef9c6388
uses: bluefireteam/melos-action@0b6c80d9846e6b1841c97d527ceb37e17db23f56
with:
melos-version: "6.3.2"
- name: Restore Cache
uses: actions/cache/restore@v4
uses: actions/cache/restore@v6

Check failure on line 69 in .github/workflows/analyze.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 69 in .github/workflows/analyze.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

analyze.yaml:69: unpinned action reference: action is not pinned to a hash (required by blanket policy)
id: cache
with:
path: /home/linuxbrew/.linuxbrew
Expand All @@ -78,7 +78,7 @@
export HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK=1
brew install swift-format
- name: Save Cache
uses: actions/cache/save@v4
uses: actions/cache/save@v6

Check failure on line 81 in .github/workflows/analyze.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 81 in .github/workflows/analyze.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

analyze.yaml:81: unpinned action reference: action is not pinned to a hash (required by blanket policy)
if: steps.cache.outputs.cache-hit != 'true'
with:
path: /home/linuxbrew/.linuxbrew
Expand Down
30 changes: 15 additions & 15 deletions .github/workflows/build.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@
# See the License for the specific language governing permissions and
# limitations under the License.

name: Run test and build

Check warning on line 15 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

build.yaml:15: overly broad permissions: default permissions used due to no permissions: block
on:
pull_request:
paths-ignore:
Expand All @@ -30,16 +30,16 @@
cancel-in-progress: true

jobs:
test-dart:

Check warning on line 33 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

build.yaml:33: overly broad permissions: default permissions used due to no permissions: block
name: Run dart unit tests
timeout-minutes: 45
runs-on:
labels: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup java
uses: actions/setup-java@v4
uses: actions/setup-java@v6

Check failure on line 42 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 42 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

build.yaml:42: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
distribution: "temurin"
java-version: "17"
Expand All @@ -51,22 +51,22 @@
channel: "stable"
cache: true
- name: Setup melos
uses: bluefireteam/melos-action@6085791af7036f6366c9a4b9d55105c0ef9c6388
uses: bluefireteam/melos-action@0b6c80d9846e6b1841c97d527ceb37e17db23f56
with:
melos-version: "6.3.2"
- name: "Run flutter test"
run: melos run test:dart

test-android:

Check warning on line 60 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

build.yaml:60: overly broad permissions: default permissions used due to no permissions: block
name: Run Android native unit tests
timeout-minutes: 45
runs-on:
labels: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup java
uses: actions/setup-java@v4
uses: actions/setup-java@v6

Check failure on line 69 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 69 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

build.yaml:69: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
distribution: "temurin"
java-version: "17"
Expand All @@ -78,13 +78,13 @@
channel: "stable"
cache: true
- name: Setup melos
uses: bluefireteam/melos-action@6085791af7036f6366c9a4b9d55105c0ef9c6388
uses: bluefireteam/melos-action@0b6c80d9846e6b1841c97d527ceb37e17db23f56
with:
melos-version: "6.3.2"
- name: "Run Android native unit tests"
run: melos run test:android

test-ios:

Check warning on line 87 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

build.yaml:87: overly broad permissions: default permissions used due to no permissions: block
name: Run iOS native unit tests
if: github.actor != 'dependabot[bot]'
timeout-minutes: 45
Expand All @@ -94,19 +94,19 @@
working_directory: "example"
steps:
- name: Checkout code
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup flutter
uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2
with:
flutter-version: "3.38.x"
channel: "stable"
cache: true
- name: Setup melos
uses: bluefireteam/melos-action@6085791af7036f6366c9a4b9d55105c0ef9c6388
uses: bluefireteam/melos-action@0b6c80d9846e6b1841c97d527ceb37e17db23f56
with:
melos-version: "6.3.2"
- name: Cache podfiles
uses: actions/cache@v4
uses: actions/cache@v6

Check failure on line 109 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 109 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

build.yaml:109: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
path: "**/Pods"
key: ${{ runner.os }}-pods-${{ hashFiles('**/*.podspec') }}
Expand All @@ -120,7 +120,7 @@
- name: "Run iOS native unit tests"
run: TEST_DEVICE='iPhone 17 Pro' TEST_OS='26.5' melos run test:ios

build-android:

Check warning on line 123 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

build.yaml:123: overly broad permissions: default permissions used due to no permissions: block
name: Build Android
needs: [test-dart, test-android]
if: contains(github.base_ref, 'main')
Expand All @@ -131,9 +131,9 @@
MAPS_API_KEY: ${{ secrets.ACTIONS_API_KEY }}
steps:
- name: Checkout code
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup java
uses: actions/setup-java@v4
uses: actions/setup-java@v6

Check failure on line 136 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 136 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

build.yaml:136: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
distribution: "temurin"
java-version: "17"
Expand All @@ -145,13 +145,13 @@
channel: "stable"
cache: true
- name: Setup melos
uses: bluefireteam/melos-action@6085791af7036f6366c9a4b9d55105c0ef9c6388
uses: bluefireteam/melos-action@0b6c80d9846e6b1841c97d527ceb37e17db23f56
with:
melos-version: "6.3.2"
- name: "Run build for Android"
run: melos run flutter-build-android

build-ios:

Check warning on line 154 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

build.yaml:154: overly broad permissions: default permissions used due to no permissions: block
name: Build iOS
needs: [test-dart, test-ios]
if: contains(github.base_ref, 'main') && github.actor != 'dependabot[bot]'
Expand All @@ -161,7 +161,7 @@
MAPS_API_KEY: ${{ secrets.ACTIONS_API_KEY }}
steps:
- name: Checkout code
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup flutter
uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2
with:
Expand All @@ -170,11 +170,11 @@
cache: true
architecture: x64
- name: Setup melos
uses: bluefireteam/melos-action@6085791af7036f6366c9a4b9d55105c0ef9c6388
uses: bluefireteam/melos-action@0b6c80d9846e6b1841c97d527ceb37e17db23f56
with:
melos-version: "6.3.2"
- name: Cache podfiles
uses: actions/cache@v4
uses: actions/cache@v6

Check failure on line 177 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 177 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

build.yaml:177: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
path: "**/Pods"
key: ${{ runner.os }}-pods-${{ hashFiles('**/*.podspec') }}
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/licence-check.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -24,14 +24,14 @@
cancel-in-progress: true

jobs:
check-files-license-headers:

Check warning on line 27 in .github/workflows/licence-check.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

licence-check.yaml:27: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- name: Checkout code
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup go
uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c
uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
with:
go-version: "^1.13.1"
# Go is used by addlicense command (addlicense is used in melos run
Expand All @@ -45,7 +45,7 @@
channel: "stable"
cache: true
- name: Install Melos
uses: bluefireteam/melos-action@6085791af7036f6366c9a4b9d55105c0ef9c6388
uses: bluefireteam/melos-action@0b6c80d9846e6b1841c97d527ceb37e17db23f56
with:
# Running `melos bootstrap` is not needed because we use Melos just
# for the `check-license-header` script.
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release-please.yml
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ jobs:
release-please:
runs-on: ubuntu-latest
steps:
- uses: googleapis/release-please-action@16a9c90856f42705d54a6fda1823352bdc62cf38
- uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7
with:
token: ${{ secrets.SYNCED_GITHUB_TOKEN_REPO }}
config-file: release-please-config.json
Expand Down
Loading