Skip to content

Commit bb9228a

Browse files
committedApr 26, 2021
CI/CD: Use private cache of (third-party) GitHub Actions.
This is a step towards implementing the GitHub security hardening advice. sed -ri 's|(uses: +)([^/]+)/([^@])|\1briansmith/\2-\3|g' .github/workflows/ci.yml
1 parent 087bc85 commit bb9228a

File tree

1 file changed

+17
-17
lines changed

1 file changed

+17
-17
lines changed
 

‎.github/workflows/ci.yml

+17-17
Original file line numberDiff line numberDiff line change
@@ -9,12 +9,12 @@ jobs:
99
runs-on: ubuntu-18.04
1010

1111
steps:
12-
- uses: actions-rs/toolchain@v1
12+
- uses: briansmith/actions-rs-toolchain@v1
1313
with:
1414
toolchain: stable
1515
profile: minimal
1616
components: rustfmt
17-
- uses: actions/checkout@v2
17+
- uses: briansmith/actions-checkout@v2
1818
with:
1919
persist-credentials: false
2020
- run: cargo fmt --all -- --check
@@ -23,13 +23,13 @@ jobs:
2323
runs-on: ubuntu-18.04
2424

2525
steps:
26-
- uses: actions-rs/toolchain@v1
26+
- uses: briansmith/actions-rs-toolchain@v1
2727
with:
2828
toolchain: stable
2929
profile: minimal
3030
components: clippy
3131

32-
- uses: actions/checkout@v2
32+
- uses: briansmith/actions-checkout@v2
3333
with:
3434
persist-credentials: false
3535

@@ -39,12 +39,12 @@ jobs:
3939
runs-on: ubuntu-18.04
4040

4141
steps:
42-
- uses: actions-rs/toolchain@v1
42+
- uses: briansmith/actions-rs-toolchain@v1
4343
with:
4444
toolchain: stable
4545
profile: minimal
4646

47-
- uses: actions/cache@v2
47+
- uses: briansmith/actions-cache@v2
4848
with:
4949
path: |
5050
~/.cargo/bin/cargo-audit
@@ -54,7 +54,7 @@ jobs:
5454

5555
- run: cargo install cargo-audit --vers "0.13.1"
5656

57-
- uses: actions/checkout@v2
57+
- uses: briansmith/actions-checkout@v2
5858
with:
5959
persist-credentials: false
6060

@@ -66,12 +66,12 @@ jobs:
6666
runs-on: ubuntu-18.04
6767

6868
steps:
69-
- uses: actions-rs/toolchain@v1
69+
- uses: briansmith/actions-rs-toolchain@v1
7070
with:
7171
toolchain: stable
7272
profile: minimal
7373

74-
- uses: actions/cache@v2
74+
- uses: briansmith/actions-cache@v2
7575
with:
7676
path: |
7777
~/.cargo/bin/cargo-deny
@@ -81,7 +81,7 @@ jobs:
8181

8282
- run: cargo install cargo-deny --vers "0.8.4"
8383

84-
- uses: actions/checkout@v2
84+
- uses: briansmith/actions-checkout@v2
8585
with:
8686
persist-credentials: false
8787

@@ -102,13 +102,13 @@ jobs:
102102
- target: x86_64-unknown-linux-gnu
103103

104104
steps:
105-
- uses: actions-rs/toolchain@v1
105+
- uses: briansmith/actions-rs-toolchain@v1
106106
with:
107107
override: true
108108
target: ${{ matrix.target }}
109109
toolchain: ${{ matrix.rust_channel }}
110110

111-
- uses: actions/checkout@v2
111+
- uses: briansmith/actions-checkout@v2
112112
with:
113113
persist-credentials: false
114114

@@ -145,11 +145,11 @@ jobs:
145145
host_os: ubuntu-18.04
146146

147147
steps:
148-
- uses: actions/checkout@v2
148+
- uses: briansmith/actions-checkout@v2
149149
with:
150150
persist-credentials: false
151151

152-
- uses: actions-rs/toolchain@v1
152+
- uses: briansmith/actions-rs-toolchain@v1
153153
with:
154154
override: true
155155
target: ${{ matrix.target }}
@@ -185,14 +185,14 @@ jobs:
185185
- if: ${{ contains(matrix.host_os, 'ubuntu') }}
186186
run: sudo apt-get update -y
187187

188-
- uses: actions/checkout@v2
188+
- uses: briansmith/actions-checkout@v2
189189
with:
190190
persist-credentials: false
191191

192192
- if: ${{ !contains(matrix.host_os, 'windows') }}
193193
run: RING_COVERAGE=1 mk/install-build-tools.sh --target=${{ matrix.target }} ${{ matrix.features }}
194194

195-
- uses: actions-rs/toolchain@v1
195+
- uses: briansmith/actions-rs-toolchain@v1
196196
with:
197197
override: true
198198
target: ${{ matrix.target }}
@@ -205,7 +205,7 @@ jobs:
205205
run: |
206206
RING_COVERAGE=1 mk/cargo.sh +${{ matrix.rust_channel }} test -vv --target=${{ matrix.target }} ${{ matrix.cargo_options }} ${{ matrix.features }} ${{ matrix.mode }}
207207
208-
- uses: codecov/codecov-action@v1
208+
- uses: briansmith/codecov-codecov-action@v1
209209
with:
210210
directory: ./target/${{ matrix.target }}/debug/coverage/reports
211211
fail_ci_if_error: true

0 commit comments

Comments
 (0)
Please sign in to comment.