mirror of https://github.com/carbon-language/carbon-lang.git synced 2026-09-24 20:10:13 +01:00

Files

T

Richard Smith afb733f02a Don't allow merging PRs with the dependent label. (#7096 )

This should reduce the chance of a dependent PR being merged before its
base PR is merged.

Assisted-by: Gemini via Antigravity

2026-04-23 01:58:36 +00:00

auto_label_prs.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

check_dependent.yaml

Don't allow merging PRs with the dependent label. (#7096 )

2026-04-23 01:58:36 +00:00

clangd_tidy.yaml

Fully switch to the new compilation database system (#7057 )

2026-04-14 13:41:33 +00:00

discord_wiki.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

gh_pages_ci.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

gh_pages_deploy.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

nightly_release.yaml

Update the name of the bazel target to build the nightly tarball (#7080 )

2026-04-20 17:59:55 +00:00

pre_commit_suggestions.yaml

Remove jonmeow from pre-commit config (#6966 )

2026-03-25 23:01:20 +00:00

pre_commit.yaml

Allow uploads.github.com (#6866 )

2026-03-09 18:21:08 +00:00

proposal_labeled.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

proposal_ready.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

README.md

Update clangd-tidy endpoint whitelist (#6855 )

2026-03-09 03:23:22 +00:00

sync_repos.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

tests.yaml

Add ASan to post-merge CI and improve the action structure for GitHub (#7012 )

2026-04-09 20:37:23 +00:00

triage_inactive.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

README.md

Workflows

Hardening

Workflows are hardened using Step Security tool. Findings for the "Harden Runner" steps are available online.

Allowed endpoints

Most jobs only have a few endpoints, but due to tools which do downloads, a few have significantly more. These are:

clangd_tidy.yaml (Bazel)
pre_commit.yaml (Bazel, pre-commit)
nightly_release.yaml (Bazel)
tests.yaml (Bazel)

When updating one of these, consider updating all of them.

We try to keep allowed-endpoints with one per line. Prettier wants to wrap them, which we fix this with prettier-ignore.

Testing

We keep around an action-test branch in carbon-lang, which can be used to test triggers with push: configurations. For example:

on:
  push:
    branches: [action-test]