Skip to content

Bump actions/setup-python from 6.2.0 to 7.0.0 #1097

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
+5 −5
Open

Bump actions/setup-python from 6.2.0 to 7.0.0 #1097

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions .github/workflows/ci.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,7 +53,7 @@
cancel-in-progress: true
group: ${{github.workflow}}-${{github.event.pull_request.number||github.ref}}

permissions: read-all

Check warning on line 56 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

ci.yaml:56: overly broad permissions: uses read-all permissions

jobs:
python-checks:
Expand All @@ -67,7 +67,7 @@
fetch-depth: 0

- name: Set up Python
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v5
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v5

Check warning on line 70 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

ref-version-mismatch 

ci.yaml:70: action's hash pin has mismatched or missing version comment: points to commit a26af69be951
with:
python-version: ${{env.python-version}}
cache: pip
Expand Down Expand Up @@ -188,7 +188,7 @@

- name: Run actionlint
continue-on-error: ${{inputs.soft-linting == 'true'}}
uses: raven-actions/actionlint@205b530c5d9fa8f44ae9ed59f341a0db994aa6f8 # v2

Check warning on line 191 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

ref-version-mismatch 

ci.yaml:191: action's hash pin has mismatched or missing version comment: points to commit 3d39aea43475
with:
flags: ${{inputs.debug && '-verbose'}}
files: '.github/workflows/*.{yaml,yml}'
Expand Down Expand Up @@ -226,7 +226,7 @@
submodules: recursive

- name: Set up Python
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v5
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v5

Check warning on line 229 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

ref-version-mismatch 

ci.yaml:229: action's hash pin has mismatched or missing version comment: points to commit a26af69be951
id: setup
with:
python-version: ${{matrix.python_version}}
Expand Down Expand Up @@ -260,8 +260,8 @@
env:
root: 'C:\\hostedtoolcache\\windows\\Python'
exe: '${{steps.setup.outputs.python-version}}\\x64\\python3.exe'
shell: cmd

Check warning on line 263 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

misfeature 

ci.yaml:263: usage of GitHub Actions misfeatures: shell defined here
run: bash -x dev_tools/test_libs.sh ${{inputs.debug && '--config=verbose'}} --action_env PYTHON_BIN_PATH=${{env.root}}\\${{env.exe}}

Check failure on line 264 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/template-injection 

code injection via template expansion: may expand into attacker-controllable code

Check failure on line 264 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

template-injection 

ci.yaml:264: code injection via template expansion: may expand into attacker-controllable code

- name: Install LLVM and OpenMP on macOS
if: startsWith(matrix.os, 'macos')
Expand Down Expand Up @@ -318,7 +318,7 @@
submodules: recursive

- name: Set up Python
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v5
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v5

Check warning on line 321 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

ref-version-mismatch 

ci.yaml:321: action's hash pin has mismatched or missing version comment: points to commit a26af69be951
with:
python-version: ${{env.python-version}}
cache: pip
Expand Down Expand Up @@ -377,7 +377,7 @@
submodules: recursive

- name: Set up Python
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v5
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v5

Check warning on line 380 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

ref-version-mismatch 

ci.yaml:380: action's hash pin has mismatched or missing version comment: points to commit a26af69be951
with:
python-version: ${{env.python-version}}
cache: pip
Expand All @@ -404,13 +404,13 @@
- name: Run TCMalloc tests
env:
PERFTOOLS_VERBOSE: ${{inputs.debug && 1}}
run: bazel test --config=tcmalloc ${{env.common_args}}

Check failure on line 407 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/template-injection 

code injection via template expansion: may expand into attacker-controllable code

Check failure on line 407 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

template-injection 

ci.yaml:407: code injection via template expansion: may expand into attacker-controllable code

- name: Run memory sanitizer tests
run: bazel test --config=msan ${{env.common_args}}

Check failure on line 410 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/template-injection 

code injection via template expansion: may expand into attacker-controllable code

Check failure on line 410 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

template-injection 

ci.yaml:410: code injection via template expansion: may expand into attacker-controllable code

- name: Run address sanitizer tests
run: bazel test --config=asan ${{env.common_args}}

Check failure on line 413 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/template-injection 

code injection via template expansion: may expand into attacker-controllable code

Check failure on line 413 in .github/workflows/ci.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

template-injection 

ci.yaml:413: code injection via template expansion: may expand into attacker-controllable code

docker-tests:
name: Docker build tests
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/cirq_compatibility.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,7 @@
submodules: recursive

- name: Set up Python with caching of pip dependencies
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v5
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v5

Check warning on line 50 in .github/workflows/cirq_compatibility.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

ref-version-mismatch 

cirq_compatibility.yml:50: action's hash pin has mismatched or missing version comment: points to commit a26af69be951
with:
python-version: '3.12'
cache: pip
Expand Down
Loading