Skip to content

[draft] suggestion by cc based on cii improvement#2

Draft
insop wants to merge 1 commit intomainfrom
insop/cc-1
Draft

[draft] suggestion by cc based on cii improvement#2
insop wants to merge 1 commit intomainfrom
insop/cc-1

Conversation

@insop
Copy link
Copy Markdown
Owner

@insop insop commented Mar 30, 2026

No description provided.

Comment thread .github/workflows/ci.yaml
with:
persist-credentials: false

- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1

Check failure

Code scanning / zizmor

runtime artifacts potentially vulnerable to a cache poisoning attack Error

runtime artifacts potentially vulnerable to a cache poisoning attack
Comment thread .github/workflows/ci.yaml
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version: ${{ env.PYTHON_VERSION }}

Check failure

Code scanning / zizmor

runtime artifacts potentially vulnerable to a cache poisoning attack Error

runtime artifacts potentially vulnerable to a cache poisoning attack
Comment thread .github/workflows/ci.yaml
Comment on lines +178 to +204
cargo_check_macos:
if: ${{ github.event_name != 'pull_request' }}
name: Ensure compilation on macOS targets
runs-on: macos-15
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false

- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
with:
prefix-key: v0-rust-aarch64-apple-ios-x86_64-apple-darwin
save-if: ${{ github.ref == 'refs/heads/main' }}

- uses: dtolnay/rust-toolchain@efa25f7f19611383d5b0ccf2d1c8914531636bf9
with:
targets: aarch64-apple-ios,x86_64-apple-darwin
toolchain: stable

- name: Check compilation
run: |
for target in aarch64-apple-ios x86_64-apple-darwin
do
echo "::group::${target}"
cargo check --target $target ${{ env.CARGO_ARGS_NO_SSL }}
echo "::endgroup::"
done

Check warning

Code scanning / zizmor

overly broad permissions Warning

overly broad permissions
Comment thread .github/workflows/ci.yaml
prefix-key: v0-rust-aarch64-apple-ios-x86_64-apple-darwin
save-if: ${{ github.ref == 'refs/heads/main' }}

- uses: dtolnay/rust-toolchain@efa25f7f19611383d5b0ccf2d1c8914531636bf9

Check notice

Code scanning / zizmor

action functionality is already included by the runner Note

action functionality is already included by the runner
Comment thread .github/workflows/ci.yaml
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
with:
save-if: ${{ github.ref == 'refs/heads/main' }}

Check notice

Code scanning / zizmor

action functionality is already included by the runner Note

action functionality is already included by the runner
Comment thread .github/workflows/ci.yaml

- name: Run CPython tests
run: |
target/release/rustpython -m test -j ${{ steps.cores.outputs.cores }} -u all --slowest --fail-env-changed --timeout 600 -v -x ${{ env.FLAKY_MP_TESTS }}

Check notice

Code scanning / zizmor

code injection via template expansion Note

code injection via template expansion
@insop insop marked this pull request as draft March 30, 2026 15:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants