分支: trunk

Chandler Carruth 0e308e0739 Switch to a manual check status for dependent PRs (#7117)		5 天之前
..
README.md	0dac40e793 Update clangd-tidy endpoint whitelist (#6855)	1 月之前
auto_label_prs.yaml	6786edd6ff Update action versions (#6848)	1 月之前
check_dependent_pr.yaml	0e308e0739 Switch to a manual check status for dependent PRs (#7117)	5 天之前
clangd_tidy.yaml	96529e16bd Fully switch to the new compilation database system (#7057)	2 周之前
discord_wiki.yaml	6786edd6ff Update action versions (#6848)	1 月之前
gh_pages_ci.yaml	6786edd6ff Update action versions (#6848)	1 月之前
gh_pages_deploy.yaml	6786edd6ff Update action versions (#6848)	1 月之前
nightly_release.yaml	1e3906177c Update the name of the bazel target to build the nightly tarball (#7080)	1 周之前
pre_commit.yaml	a1b6f1c4bd Allow uploads.github.com (#6866)	1 月之前
pre_commit_suggestions.yaml	25793358c3 Remove jonmeow from pre-commit config (#6966)	1 月之前
proposal_labeled.yaml	6786edd6ff Update action versions (#6848)	1 月之前
proposal_ready.yaml	6786edd6ff Update action versions (#6848)	1 月之前
sync_repos.yaml	6786edd6ff Update action versions (#6848)	1 月之前
tests.yaml	3db691ecef Add ASan to post-merge CI and improve the action structure for GitHub (#7012)	3 周之前
triage_inactive.yaml	6786edd6ff Update action versions (#6848)	1 月之前

Workflows

Hardening

Workflows are hardened using Step Security tool. Findings for the "Harden Runner" steps are available online.

Most jobs only have a few endpoints, but due to tools which do downloads, a few have significantly more. These are:

When updating one of these, consider updating all of them.

We try to keep allowed-endpoints with one per line. Prettier wants to wrap them, which we fix this with prettier-ignore.

We keep around an action-test branch in carbon-lang, which can be used to test triggers with push: configurations. For example:

on:
  push:
    branches: [action-test]