Skip to content

update workflows to use step security maintained action #546

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Mar 17, 2025

Conversation

pputman-clabs
Copy link
Contributor

@pputman-clabs pputman-clabs commented Mar 16, 2025

Description

Switching to use step-security maintained action due to vulnerability with tj-actions/changed-files


PR-Codex overview

This PR updates the GitHub Actions workflow configuration by changing the source of certain actions from tj-actions to step-security, ensuring the workflow uses the latest versions and potentially more secure implementations.

Detailed summary

  • Updated the output URL for changed-files from tj-actions to step-security.
  • Changed the action for verifying changed files from tj-actions/verify-changed-files@v17 to step-security/verify-changed-files@3dbe17c78367e7d60f00d78ae6781a35be47b4a1.
  • Updated the action for detecting changed files from tj-actions/changed-files@v44 to step-security/changed-files@3dbe17c78367e7d60f00d78ae6781a35be47b4a1.

✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

@pputman-clabs pputman-clabs requested a review from a team as a code owner March 16, 2025 23:27
Copy link

changeset-bot bot commented Mar 16, 2025

⚠️ No Changeset found

Latest commit: 549b0ef

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Copy link

codecov bot commented Mar 16, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 76.85%. Comparing base (9af1b80) to head (549b0ef).
Report is 1 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #546   +/-   ##
=======================================
  Coverage   76.85%   76.85%           
=======================================
  Files         248      248           
  Lines       10674    10674           
  Branches     1693     1696    +3     
=======================================
  Hits         8203     8203           
- Misses       2371     2377    +6     
+ Partials      100       94    -6     
Components Coverage Δ
celocli 86.73% <ø> (ø)
sdk 69.47% <ø> (ø)
wallets 74.36% <ø> (ø)
viem-sdks 93.01% <ø> (ø)
🚀 New features to boost your workflow:
  • Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@pputman-clabs
Copy link
Contributor Author

@nicolasbrugneaux nicolasbrugneaux merged commit 00a57cf into master Mar 17, 2025
24 of 37 checks passed
@nicolasbrugneaux nicolasbrugneaux deleted the pputman/tj-actions-fix branch March 17, 2025 08:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants