Skip to content

Harden GitHub Actions workflow configuration #45

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
achamayou merged 2 commits into from
Jun 11, 2026
Merged

Harden GitHub Actions workflow configuration #45

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
1555747
Harden GitHub Actions workflows
Copilot Jun 9, 2026
4e46b8a
Merge branch 'main' into copilot/update-codeql-and-workflow-settings
achamayou Jun 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 8 additions & 1 deletion .github/workflows/build-docs.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,10 @@ on:
- main
workflow_dispatch:

concurrency:
group: pages
cancel-in-progress: false

permissions: read-all

jobs:
Expand All @@ -14,14 +18,17 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false

- name: Setup Pages
id: pages
uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0

- name: Install dependencies
run: |
sudo apt-get install -y doxygen python3-pip graphviz
sudo apt-get update
sudo apt-get -y install doxygen python3-pip graphviz
python3 -m pip install pip -U
python3 -m pip install -r doc/requirements.txt

Expand Down
6 changes: 5 additions & 1 deletion .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,10 +32,14 @@ jobs:

steps:
- name: Install packages
run: sudo apt install doctest-dev clang clang-tidy
run: |
sudo apt-get update
sudo apt-get -y install doctest-dev clang clang-tidy
if: matrix.os == 'ubuntu-latest'

- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false

- name: Create Build Environment
run: cmake -E make_directory ${{github.workspace}}/build/${{ matrix.build_type }}
Expand Down
13 changes: 8 additions & 5 deletions .github/workflows/codeql-analysis.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,14 +6,15 @@ on:
pull_request:
# The branches below must be a subset of the branches above
branches: [ main ]
# schedule:
# - cron: '22 12 * * 1'
schedule:
- cron: '22 12 * * 1'

jobs:
analyze:
name: Analyze
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write

Expand All @@ -25,6 +26,8 @@ jobs:
steps:
- name: Checkout repository
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false

- name: Initialize CodeQL
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
Expand All @@ -36,14 +39,14 @@ jobs:
# queries: ./path/to/local/query, your-org/your-repo/queries@main

- name: Create Build Environment
run: cmake -E make_directory ${{github.workspace}}/build/${{ matrix.build_type }}
run: cmake -E make_directory ${{github.workspace}}/build

- name: Configure merklecpp
working-directory: ${{github.workspace}}/build/${{ matrix.build_type }}
working-directory: ${{github.workspace}}/build
run: cmake -DCMAKE_BUILD_TYPE=Debug -DTESTS=ON $GITHUB_WORKSPACE

- name: Build merklecpp
working-directory: ${{github.workspace}}/build/${{ matrix.build_type }}
working-directory: ${{github.workspace}}/build
run: cmake --build . --config Debug

- name: Perform CodeQL Analysis
Expand Down
Loading