llvm-project/.github/workflows/libcxx-check-generated-files.yml
Aiden Grossman 4476f7237e
[Github][libc++] Hash Pin Actions in Workflows (#129488)
This patch has pins actions in the libc Github workflows. Hash pinning
is a best practice as it ensures we are getting an exact action version,
which can help with reproducibility/reliability. It additionally
alleviates security concerns as an attacker can modify release assets,
potentially giving them access to tokens in privileged workflows.
2025-03-10 11:54:12 -07:00

25 lines
587 B
YAML

name: "Check libc++ generated files"
on:
pull_request:
paths:
- 'libcxx/**'
permissions:
contents: read
jobs:
check_generated_files:
runs-on: ubuntu-24.04
steps:
- name: Fetch LLVM sources
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Install dependencies
uses: aminya/setup-cpp@17c11551771948abc5752bbf3183482567c7caf0 # v1.1.1
with:
clangformat: 17.0.1
ninja: true
- name: Check generated files
run: libcxx/utils/ci/run-buildbot check-generated-output