Bump github/codeql-action from 3.27.1 to 3.27.3 (#1080) #2265
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: build | |
| on: | |
| push: | |
| branches: [ main ] | |
| pull_request: | |
| branches: [ main ] | |
| workflow_dispatch: | |
| env: | |
| FORCE_COLOR: 1 | |
| permissions: | |
| contents: read | |
| jobs: | |
| build: | |
| name: ${{ matrix.os }} | |
| runs-on: ${{ matrix.os }} | |
| permissions: | |
| attestations: write | |
| contents: read | |
| id-token: write | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - os: macos-latest | |
| os-name: macos | |
| - os: ubuntu-latest | |
| os-name: linux | |
| - os: windows-latest | |
| os-name: windows | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| - name: Setup Node | |
| uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0 | |
| with: | |
| node-version: '20.x' | |
| - name: Get npm cache directory | |
| id: npm-cache-dir | |
| shell: pwsh | |
| run: echo "dir=$(npm config get cache)" >> ${env:GITHUB_OUTPUT} | |
| - name: Setup npm cache | |
| uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2 | |
| id: npm-cache | |
| with: | |
| path: ${{ steps.npm-cache-dir.outputs.dir }} | |
| key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }} | |
| restore-keys: ${{ runner.os }}-node- | |
| - name: Install packages | |
| run: npm ci | |
| - name: Build and Test | |
| shell: pwsh | |
| run: ./build.ps1 | |
| - uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4.6.0 | |
| name: Upload coverage to Codecov | |
| with: | |
| file: ./coverage/lcov.info | |
| flags: ${{ matrix.os-name }} | |
| token: ${{ secrets.CODECOV_TOKEN }} | |
| - name: Generate SBOM | |
| uses: anchore/sbom-action@fc46e51fd3cb168ffb36c6d1915723c47db58abb # v0.17.7 | |
| if: runner.os == 'Linux' | |
| with: | |
| artifact-name: update-dotnet-sdk.spdx.json | |
| output-file: update-dotnet-sdk.spdx.json | |
| path: . | |
| - name: Attest dist | |
| uses: actions/attest-build-provenance@ef244123eb79f2f7a7e75d99086184180e6d0018 # v1.4.4 | |
| if: | | |
| runner.os == 'Linux' && | |
| github.ref_name == github.event.repository.default_branch | |
| with: | |
| subject-path: ./dist/**/*.js | |
| lint: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| - name: Add actionlint problem matcher | |
| run: echo "::add-matcher::.github/actionlint-matcher.json" | |
| - name: Lint workflows | |
| uses: docker://rhysd/actionlint@sha256:82244e1db1c60d82c7792180a48dd0bcb838370bb589d53ff132503fc9485868 # v1.7.4 | |
| with: | |
| args: -color |