mirror of
https://github.com/prometheus/prometheus.git
synced 2025-08-05 21:57:09 +02:00
* ci: address golangci-lint issue with persist-credentials
Fixes the following zizmor warning:
```
warning[artipacked]: credential persistence through GitHub Actions artifacts
--> scripts/golangci-lint.yml:26:9
|
26 | - name: Checkout repository
| _________-
27 | | uses: actions/checkout@11bd71901b # v4.2.2
28 | | # with:
29 | | # persist-credentials: false
| |______________________________________- does not set persist-credentials: false
```
All other actions have been fixed in https://github.com/prometheus/prometheus/pull/16530
Credit to @jharvey10 who also addressed this particular issue in
a5bf67d897
Signed-off-by: Cristian Greco <cristian@regolo.cc>
* update golangci-lint to v2.2.1
Signed-off-by: Cristian Greco <cristian@regolo.cc>
---------
Signed-off-by: Cristian Greco <cristian@regolo.cc>
42 lines
1.3 KiB
YAML
42 lines
1.3 KiB
YAML
---
|
|
# This action is synced from https://github.com/prometheus/prometheus
|
|
name: golangci-lint
|
|
on:
|
|
push:
|
|
paths:
|
|
- "go.sum"
|
|
- "go.mod"
|
|
- "**.go"
|
|
- "scripts/errcheck_excludes.txt"
|
|
- ".github/workflows/golangci-lint.yml"
|
|
- ".golangci.yml"
|
|
pull_request:
|
|
|
|
permissions: # added using https://github.com/step-security/secure-repo
|
|
contents: read
|
|
|
|
jobs:
|
|
golangci:
|
|
permissions:
|
|
contents: read # for actions/checkout to fetch code
|
|
pull-requests: read # for golangci/golangci-lint-action to fetch pull requests
|
|
name: lint
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
persist-credentials: false
|
|
- name: Install Go
|
|
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
|
|
with:
|
|
go-version: 1.24.x
|
|
- name: Install snmp_exporter/generator dependencies
|
|
run: sudo apt-get update && sudo apt-get -y install libsnmp-dev
|
|
if: github.repository == 'prometheus/snmp_exporter'
|
|
- name: Lint
|
|
uses: golangci/golangci-lint-action@1481404843c368bc19ca9406f87d6e0fc97bdcfd # v7.0.0
|
|
with:
|
|
args: --verbose
|
|
version: v2.2.1
|