diff --git a/.github/workflows/general.yml b/.github/workflows/general.yml index d90471a..84afbad 100644 --- a/.github/workflows/general.yml +++ b/.github/workflows/general.yml @@ -25,7 +25,7 @@ jobs: - name: Install Linux Dependencies run: sudo apt-get update - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - - uses: dtolnay/rust-toolchain@4f366e621dc8fa63f557ca04b8f4361824a35a45 # stable + - uses: dtolnay/rust-toolchain@ed2356ad628626a6b3f5be6c3e0255c0454fcdb9 # stable - name: Run tests run: cargo test fmt: @@ -38,7 +38,7 @@ jobs: egress-policy: audit disable-telemetry: true - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - - uses: dtolnay/rust-toolchain@4f366e621dc8fa63f557ca04b8f4361824a35a45 # stable + - uses: dtolnay/rust-toolchain@ed2356ad628626a6b3f5be6c3e0255c0454fcdb9 # stable with: components: rustfmt - name: Enforce formatting @@ -62,7 +62,7 @@ jobs: egress-policy: audit disable-telemetry: true - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - - uses: dtolnay/rust-toolchain@4f366e621dc8fa63f557ca04b8f4361824a35a45 # stable + - uses: dtolnay/rust-toolchain@ed2356ad628626a6b3f5be6c3e0255c0454fcdb9 # stable with: components: clippy - name: Linting @@ -78,7 +78,7 @@ jobs: - name: Install Linux Dependencies run: sudo apt-get update - name: Install ${{ matrix.msrv }} - uses: dtolnay/rust-toolchain@4f366e621dc8fa63f557ca04b8f4361824a35a45 # stable + uses: dtolnay/rust-toolchain@ed2356ad628626a6b3f5be6c3e0255c0454fcdb9 # stable with: toolchain: ${{ matrix.msrv }} - name: cargo +${{ matrix.msrv }} check @@ -96,7 +96,7 @@ jobs: run: sudo apt-get update - name: Checkout repository uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - - uses: dtolnay/rust-toolchain@4f366e621dc8fa63f557ca04b8f4361824a35a45 # stable + - uses: dtolnay/rust-toolchain@ed2356ad628626a6b3f5be6c3e0255c0454fcdb9 # stable with: components: llvm-tools-preview - name: Install grcov diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml new file mode 100644 index 0000000..9a598c1 --- /dev/null +++ b/.github/workflows/links.yml @@ -0,0 +1,25 @@ +name: Links +on: [push, pull_request] +permissions: + contents: read +jobs: + linkChecker: + runs-on: ubuntu-latest + steps: + - name: Harden Runner + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + with: + egress-policy: audit + disable-telemetry: true + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - name: Restore lychee cache + uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2 + with: + path: .lycheecache + key: cache-lychee-${{ github.sha }} + restore-keys: cache-lychee- + - name: Run lychee + uses: lycheeverse/lychee-action@f81112d0d2814ded911bd23e3beaa9dda9093915 # v2.1.0 + with: + args: "--base . --cache --max-cache-age 1d --exclude-path \"deny.toml\" . \"**/*.toml\" \"**/*.rs\" \"**/*.yml\"" + fail: true diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index b0f39a0..15a4bc5 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -65,6 +65,6 @@ jobs: retention-days: 5 # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0 + uses: github/codeql-action/upload-sarif@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1 with: sarif_file: results.sarif diff --git a/.github/workflows/typos.yml b/.github/workflows/typos.yml new file mode 100644 index 0000000..8474f31 --- /dev/null +++ b/.github/workflows/typos.yml @@ -0,0 +1,18 @@ +name: Spell Check +on: [pull_request] +permissions: + contents: read +jobs: + run: + name: Spell Check with Typos + runs-on: ubuntu-latest + steps: + - name: Harden Runner + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + with: + egress-policy: audit + disable-telemetry: true + - name: Checkout Actions Repository + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - name: Check spelling of entire workspace + uses: crate-ci/typos@b74202f74b4346efdbce7801d187ec57b266bac8 # v1.27.3 diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 153525b..f6a2a74 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -1,6 +1,6 @@ repos: - repo: https://github.com/commitizen-tools/commitizen - rev: v3.30.0 + rev: v3.30.1 hooks: - id: commitizen stages: @@ -16,7 +16,7 @@ repos: hooks: - id: gitleaks - repo: https://github.com/google/yamlfmt - rev: v0.13.0 + rev: v0.14.0 hooks: - id: yamlfmt - repo: https://github.com/pre-commit/pre-commit-hooks