carbon-language/carbon-lang

mirror of https://github.com/carbon-language/carbon-lang.git synced 2026-09-24 20:10:13 +01:00

Files

T

History

Jon Ross-Perkins 1d19fa3954 Disable clang-tidy action in favor of clangd-tidy (#6037 )

Generally seems to be working as intended: clang-tidy has variance from
a few minutes to an hour; clang-tidy hovers around 10 minutes. In this
case, the long tail of slow execution is more visible, partly because
tests will often take close to 10 minutes, if not more.

Branch enforcement should already be switched.

2025-09-12 20:10:14 +00:00

..

auto_assign_prs.yaml

Remove references to explorer (#5287 )

2025-04-10 22:05:45 +00:00

auto_label_prs.yaml

Add repo flag to gh (#5669 )

2025-06-13 18:12:20 +00:00

clangd_tidy.yaml

Run clangd-tidy for the merge queue (#6041 )

2025-09-10 17:59:11 +00:00

discord_wiki.yaml

Fix stray quote in action (#4193 )

2024-08-06 23:31:44 +00:00

gh_pages_ci.yaml

Build a website. (#4189 )

2024-08-20 17:53:06 +00:00

gh_pages_deploy.yaml

Build a website. (#4189 )

2024-08-20 17:53:06 +00:00

nightly_release.yaml

Revert to Ubuntu 22 builders (#5479 )

2025-05-14 20:41:07 +00:00

pre_commit_suggestions.yaml

Update workflows for security hardening. (#4192 )

2024-08-06 23:14:23 +00:00

pre_commit.yaml

Revert to Ubuntu 22 builders (#5479 )

2025-05-14 20:41:07 +00:00

proposal_labeled.yaml

Replicate the fix in #5669 to the proposal workflow (#5671 )

2025-06-13 23:07:06 +00:00

proposal_ready.yaml

Replicate the fix in #5669 to the proposal workflow (#5671 )

2025-06-13 23:07:06 +00:00

README.md

Update workflows for security hardening. (#4192 )

2024-08-06 23:14:23 +00:00

sync_repos.yaml

Update workflows for security hardening. (#4192 )

2024-08-06 23:14:23 +00:00

tests.yaml

Revert to Ubuntu 22 builders (#5479 )

2025-05-14 20:41:07 +00:00

triage_inactive.yaml

Rename 'long term' to 'long term issue' (#5023 )

2025-02-26 22:03:58 +00:00

README.md

Workflows

Hardening

Workflows are hardened using Step Security tool. Findings for the "Harden Runner" steps are available online.

Allowed endpoints

Most jobs only have a few endpoints, but due to tools which do downloads, a few have significantly more. These are:

pre_commit.yaml (Bazel, pre-commit)
nightly_release.yaml (Bazel)
tests.yaml (Bazel)

When updating one of these, consider updating all of them.

We try to keep allowed-endpoints with one per line. Prettier wants to wrap them, which we fix this with prettier-ignore.

Testing

We keep around an action-test branch in carbon-lang, which can be used to test triggers with push: configurations. For example:

on:
  push:
    branches: [action-test]