mirror of
https://github.com/official-stockfish/Stockfish.git
synced 2026-07-22 12:47:08 +00:00
ppigazziniandJoost VandeVondele
463f5a6ee1
Pin every external action used by the root GitHub workflow set to a full-length commit SHA and keep the selected release tag as a same-line comment. Update the root workflows to the latest stable tagged action versions found during the audit while preserving existing release guards, permissions, and reusable workflow wiring. closes https://github.com/official-stockfish/Stockfish/pull/6754 No functional change.
58 lines
2.0 KiB
YAML
58 lines
2.0 KiB
YAML
# This workflow will run clang-format and comment on the PR.
|
|
# Because of security reasons, it is crucial that this workflow
|
|
# executes no shell script nor runs make.
|
|
# Read this before editing: https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
|
|
|
|
name: Clang-Format
|
|
on:
|
|
pull_request_target:
|
|
branches:
|
|
- "master"
|
|
paths:
|
|
- "**.cpp"
|
|
- "**.h"
|
|
|
|
permissions:
|
|
pull-requests: write
|
|
|
|
jobs:
|
|
Clang-Format:
|
|
name: Clang-Format
|
|
runs-on: ubuntu-22.04
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
with:
|
|
ref: ${{ github.event.pull_request.head.sha }}
|
|
|
|
- name: Run clang-format style check
|
|
uses: jidicula/clang-format-action@654a770daa28443dd111d133e4083e21c1075674 # v4.18.0
|
|
id: clang-format
|
|
continue-on-error: true
|
|
with:
|
|
clang-format-version: "20"
|
|
exclude-regex: "incbin"
|
|
|
|
- name: Comment on PR
|
|
if: steps.clang-format.outcome == 'failure'
|
|
uses: thollander/actions-comment-pull-request@24bffb9b452ba05a4f3f77933840a6a841d1b32b # v3.0.1
|
|
with:
|
|
message: |
|
|
clang-format 20 needs to be run on this PR.
|
|
If you do not have clang-format installed, the maintainer will run it when merging.
|
|
For the exact version please see https://packages.ubuntu.com/plucky/clang-format-20.
|
|
|
|
_(execution **${{ github.run_id }}** / attempt **${{ github.run_attempt }}**)_
|
|
comment_tag: execution
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: Comment on PR
|
|
if: steps.clang-format.outcome != 'failure'
|
|
uses: thollander/actions-comment-pull-request@24bffb9b452ba05a4f3f77933840a6a841d1b32b # v3.0.1
|
|
with:
|
|
message: |
|
|
_(execution **${{ github.run_id }}** / attempt **${{ github.run_attempt }}**)_
|
|
create_if_not_exists: false
|
|
comment_tag: execution
|
|
mode: delete
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|