mirror of
https://github.com/llvm/llvm-project.git
synced 2025-04-17 16:06:40 +00:00

This patch has pins actions in the libc Github workflows. Hash pinning is a best practice as it ensures we are getting an exact action version, which can help with reproducibility/reliability. It additionally alleviates security concerns as an attacker can modify release assets, potentially giving them access to tokens in privileged workflows.
25 lines
587 B
YAML
25 lines
587 B
YAML
name: "Check libc++ generated files"
|
|
on:
|
|
pull_request:
|
|
paths:
|
|
- 'libcxx/**'
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
check_generated_files:
|
|
runs-on: ubuntu-24.04
|
|
steps:
|
|
- name: Fetch LLVM sources
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
|
|
- name: Install dependencies
|
|
uses: aminya/setup-cpp@17c11551771948abc5752bbf3183482567c7caf0 # v1.1.1
|
|
with:
|
|
clangformat: 17.0.1
|
|
ninja: true
|
|
|
|
- name: Check generated files
|
|
run: libcxx/utils/ci/run-buildbot check-generated-output
|