⬆️ Bump step-security/harden-runner from 2.19.4 to 2.20.0 (#5… #5370

Workflow file for this run

	name: Ubuntu

	on:
	push:
	branches:
	- develop
	- master
	- release/*
	pull_request:
	workflow_dispatch:

	permissions:
	contents: read

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref \|\| github.run_id }}
	cancel-in-progress: true

	jobs:
	ci_test_gcc:
	runs-on: ubuntu-latest
	container: gcc:latest
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false
	- name: Get latest CMake and ninja
	uses: lukka/get-cmake@f5b8fbb4d77cec1acc5a5f9f0df4beffaf5d98d9 # v4.3.4
	- name: Run CMake
	run: cmake -S . -B build -DJSON_CI=On
	- name: Build
	run: cmake --build build --target ci_test_gcc

	ci_infer:
	runs-on: ubuntu-latest
	container: ghcr.io/nlohmann/json-ci:v2.4.0
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false
	- name: Run CMake
	run: cmake -S . -B build -DJSON_CI=On
	- name: Build
	run: cmake --build build --target ci_infer

	ci_static_analysis_ubuntu:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	target: [ci_test_amalgamation, ci_test_single_header, ci_cppcheck, ci_cpplint, ci_reproducible_tests, ci_non_git_tests, ci_offline_testdata, ci_reuse_compliance, ci_test_valgrind]
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
	with:
	egress-policy: audit

	- name: Install Valgrind
	run: sudo apt-get update ; sudo apt-get install -y valgrind
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false
	- name: Get latest CMake and ninja
	uses: lukka/get-cmake@f5b8fbb4d77cec1acc5a5f9f0df4beffaf5d98d9 # v4.3.4
	- name: Run CMake
	run: cmake -S . -B build -DJSON_CI=On
	- name: Build
	run: cmake --build build --target ${{ matrix.target }}

	ci_static_analysis_clang:
	runs-on: ubuntu-latest
	container: silkeh/clang:dev
	strategy:
	matrix:
	target: [ci_test_clang, ci_clang_tidy, ci_test_clang_sanitizer, ci_clang_analyze, ci_single_binaries]
	steps:
	- name: Install git, clang-tools, iwyu (ci_single_binaries), and unzip
	run: apt-get update ; apt-get install -y git clang-tools iwyu unzip
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false
	- name: Get latest CMake and ninja
	uses: lukka/get-cmake@f5b8fbb4d77cec1acc5a5f9f0df4beffaf5d98d9 # v4.3.4
	- name: Run CMake
	run: cmake -S . -B build -DJSON_CI=On
	- name: Build
	run: cmake --build build --target ${{ matrix.target }}

	ci_cmake_options:
	runs-on: ubuntu-latest
	container: ubuntu:focal
	strategy:
	matrix:
	target: [ci_cmake_flags, ci_test_diagnostics, ci_test_diagnostic_positions, ci_test_noexceptions, ci_test_noimplicitconversions, ci_test_legacycomparison, ci_test_noglobaludls]
	steps:
	- name: Install build-essential
	run: apt-get update ; apt-get install -y build-essential unzip wget git libssl-dev
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false
	- name: Get latest CMake and ninja
	uses: lukka/get-cmake@f5b8fbb4d77cec1acc5a5f9f0df4beffaf5d98d9 # v4.3.4
	- name: Run CMake
	run: cmake -S . -B build -DJSON_CI=On
	- name: Build
	run: cmake --build build --target ${{ matrix.target }}

	ci_test_coverage:
	runs-on: ubuntu-latest
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
	with:
	egress-policy: audit

	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false
	- name: Install dependencies and de_DE locale
	run: \|
	sudo apt-get clean
	sudo apt-get update
	sudo apt-get install -y build-essential cmake lcov ninja-build make locales gcc-multilib g++-multilib
	sudo locale-gen de_DE
	sudo update-locale
	- name: Run CMake
	run: cmake -S . -B build -DJSON_CI=On
	- name: Build
	run: cmake --build build --target ci_test_coverage
	- name: Archive coverage report
	uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
	with:
	name: code-coverage-report
	path: ${{ github.workspace }}/build/html
	- name: Publish report to Coveralls
	uses: coverallsapp/github-action@5cbfd81b66ca5d10c19b062c04de0199c215fb6e # v2.3.7
	with:
	github-token: ${{ secrets.GITHUB_TOKEN }}
	path-to-lcov: ${{ github.workspace }}/build/json.info.filtered.noexcept
	fail-on-error: false

	ci_test_compilers_gcc_old:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	compiler: ['4.8', '4.9', '5', '6']
	container: ghcr.io/nlohmann/json-ci:v2.4.0
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false
	- name: Run CMake
	run: CXX=g++-${{ matrix.compiler }} cmake -S . -B build -DJSON_CI=On
	- name: Build
	run: cmake --build build --target ci_test_compiler_g++-${{ matrix.compiler }}

	ci_test_compilers_gcc:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	# older GCC docker images (4, 5, 6) fail to check out code
	compiler: ['7', '8', '9', '10', '11', '12', '13', '14', '15', 'latest']
	container: gcc:${{ matrix.compiler }}
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false
	- name: Get latest CMake and ninja
	uses: lukka/get-cmake@f5b8fbb4d77cec1acc5a5f9f0df4beffaf5d98d9 # v4.3.4
	- name: Run CMake
	run: cmake -S . -B build -DJSON_CI=On
	- name: Build
	run: cmake --build build --target ci_test_compiler_default

	ci_test_compilers_clang:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	compiler: ['3.4', '3.5', '3.6', '3.7', '3.8', '3.9', '4', '5', '6', '7', '8', '9', '10', '11', '12', '13', '14', '15-bullseye', '16', '17', '18', '19', '20', 'latest']
	container: silkeh/clang:${{ matrix.compiler }}
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false
	- name: Get latest CMake and ninja
	uses: lukka/get-cmake@f5b8fbb4d77cec1acc5a5f9f0df4beffaf5d98d9 # v4.3.4
	- name: Set env FORCE_STDCPPFS_FLAG for clang 7 / 8 / 9 / 10
	run: echo "JSON_FORCED_GLOBAL_COMPILE_OPTIONS=-DJSON_HAS_FILESYSTEM=0;-DJSON_HAS_EXPERIMENTAL_FILESYSTEM=0" >> "$GITHUB_ENV"
	if: ${{ matrix.compiler == '7' \|\| matrix.compiler == '8' \|\| matrix.compiler == '9' \|\| matrix.compiler == '10' }}
	- name: Run CMake
	run: cmake -S . -B build -DJSON_CI=On
	- name: Build
	run: cmake --build build --target ci_test_compiler_default

	ci_test_standards_gcc:
	runs-on: ubuntu-latest
	container: gcc:latest
	strategy:
	matrix:
	standard: [11, 14, 17, 20, 23, 26]
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false
	- name: Get latest CMake and ninja
	uses: lukka/get-cmake@f5b8fbb4d77cec1acc5a5f9f0df4beffaf5d98d9 # v4.3.4
	- name: Run CMake
	run: cmake -S . -B build -DJSON_CI=On
	- name: Build
	run: cmake --build build --target ci_test_gcc_cxx${{ matrix.standard }}

	ci_test_standards_clang:
	runs-on: ubuntu-latest
	container: silkeh/clang:latest
	strategy:
	matrix:
	standard: [11, 14, 17, 20, 23, 26]
	stdlib: [libcxx, libstdcxx]
	steps:
	- name: Install git and unzip
	run: apt-get update ; apt-get install -y git unzip
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false
	- name: Get latest CMake and ninja
	uses: lukka/get-cmake@f5b8fbb4d77cec1acc5a5f9f0df4beffaf5d98d9 # v4.3.4
	- name: Run CMake
	run: cmake -S . -B build -DJSON_CI=On
	- name: Build with libc++
	run: cmake --build build --target ci_test_clang_libcxx_cxx${{ matrix.standard }}
	if: ${{ matrix.stdlib == 'libcxx' }}
	- name: Build with libstdc++
	run: cmake --build build --target ci_test_clang_cxx${{ matrix.standard }}
	if: ${{ matrix.stdlib == 'libstdcxx' }}

	ci_cuda_example:
	runs-on: ubuntu-latest
	container: ghcr.io/nlohmann/json-ci:v2.4.0
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false
	- name: Run CMake
	run: cmake -S . -B build -DJSON_CI=On
	- name: Build
	run: cmake --build build --target ci_cuda_example

	ci_module_cpp20:
	strategy:
	matrix:
	container: ['gcc:latest', 'silkeh/clang:latest']
	runs-on: ubuntu-latest
	container: ${{ matrix.container }}
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false
	# The module test uses `import std;`, which needs CMake's experimental
	# import-std support. Its opt-in token is CMake-version-specific, so pin
	# CMake to the version whose token is set in tests/module_cpp20/CMakeLists.txt.
	- name: Get pinned CMake and ninja
	uses: lukka/get-cmake@f5b8fbb4d77cec1acc5a5f9f0df4beffaf5d98d9 # v4.3.4
	with:
	cmakeVersion: 4.3.4
	# Clang: the std library module is provided by libc++ (the image's libstdc++
	# ships none), and the image's libc++ module manifest has a broken relative
	# path — repoint it at the real module sources.
	- name: Use libc++ and fix its module manifest path (Clang)
	if: matrix.container == 'silkeh/clang:latest'
	run: \|
	echo "CXXFLAGS=-stdlib=libc++" >> "$GITHUB_ENV"
	mkdir -p /usr/lib/share && ln -sf /usr/lib/llvm-*/share/libc++ /usr/lib/share/libc++
	- name: Run CMake
	run: cmake -S . -B build -DJSON_CI=On
	- name: Build
	run: cmake --build build --target ci_module_cpp20

	ci_icpc:
	runs-on: ubuntu-latest
	container: ghcr.io/nlohmann/json-ci:v2.2.0
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false
	- name: Run CMake
	run: cmake -S . -B build -DJSON_CI=On
	- name: Build
	run: \|
	. /opt/intel/oneapi/setvars.sh
	cmake --build build --target ci_icpc

	ci_icpx:
	runs-on: ubuntu-latest
	container: intel/oneapi-hpckit:latest
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	- name: Get latest CMake and ninja
	uses: lukka/get-cmake@f5b8fbb4d77cec1acc5a5f9f0df4beffaf5d98d9 # v4.3.4
	- name: Run CMake
	run: cmake -S . -B build -DJSON_CI=On
	- name: Build
	run: cmake --build build --target ci_icpx

	ci_nvhpc:
	runs-on: ubuntu-latest
	container: nvcr.io/nvidia/nvhpc:25.5-devel-cuda12.9-ubuntu22.04
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	- name: Get latest CMake and ninja
	uses: lukka/get-cmake@f5b8fbb4d77cec1acc5a5f9f0df4beffaf5d98d9 # v4.3.4
	- name: Run CMake
	run: cmake -S . -B build -DJSON_CI=On
	- name: Build
	run: cmake --build build --target ci_nvhpc

	ci_emscripten:
	runs-on: ubuntu-latest
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
	with:
	egress-policy: audit

	- name: Install emscripten
	uses: mymindstorm/setup-emsdk@4528d102f7230f0e7b276855c01ea1159be0e984 # v16
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false
	- name: Get latest CMake and ninja
	uses: lukka/get-cmake@f5b8fbb4d77cec1acc5a5f9f0df4beffaf5d98d9 # v4.3.4
	- name: Run CMake
	run: cmake -S . -B build -DCMAKE_TOOLCHAIN_FILE=$EMSDK/upstream/emscripten/cmake/Modules/Platform/Emscripten.cmake -GNinja
	- name: Build
	run: cmake --build build

	ci_test_documentation:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	target: [ci_test_examples, ci_test_build_documentation]
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
	with:
	egress-policy: audit

	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false
	- name: Run CMake
	run: cmake -S . -B build -DJSON_CI=On
	- name: Build
	run: cmake --build build --target ${{ matrix.target }}

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

⬆️ Bump step-security/harden-runner from 2.19.4 to 2.20.0 (#5… #5370

Workflow file

⬆️ Bump step-security/harden-runner from 2.19.4 to 2.20.0 (#5… #5370

Uh oh!

Workflow file for this run