carbon-language/carbon-lang

mirror of https://github.com/carbon-language/carbon-lang.git synced 2026-09-30 22:02:41 +01:00

Files

T

History

Chandler Carruth 96529e16bd Fully switch to the new compilation database system (#7057 )

This has been working really well for me, is incredibly faster than the
other approach, and some commits continue to hit bugs in the old system
where files that aren't even going to be run through `clangd-tidy` end
up tripping up the execution. Hopefully all of that is resolved with the
new version.

2026-04-14 13:41:33 +00:00

..

auto_label_prs.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

clangd_tidy.yaml

Fully switch to the new compilation database system (#7057 )

2026-04-14 13:41:33 +00:00

discord_wiki.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

gh_pages_ci.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

gh_pages_deploy.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

nightly_release.yaml

Allow uploads.github.com (#6866 )

2026-03-09 18:21:08 +00:00

pre_commit_suggestions.yaml

Remove jonmeow from pre-commit config (#6966 )

2026-03-25 23:01:20 +00:00

pre_commit.yaml

Allow uploads.github.com (#6866 )

2026-03-09 18:21:08 +00:00

proposal_labeled.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

proposal_ready.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

README.md

Update clangd-tidy endpoint whitelist (#6855 )

2026-03-09 03:23:22 +00:00

sync_repos.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

tests.yaml

Add ASan to post-merge CI and improve the action structure for GitHub (#7012 )

2026-04-09 20:37:23 +00:00

triage_inactive.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

README.md

Workflows

Hardening

Workflows are hardened using Step Security tool. Findings for the "Harden Runner" steps are available online.

Allowed endpoints

Most jobs only have a few endpoints, but due to tools which do downloads, a few have significantly more. These are:

clangd_tidy.yaml (Bazel)
pre_commit.yaml (Bazel, pre-commit)
nightly_release.yaml (Bazel)
tests.yaml (Bazel)

When updating one of these, consider updating all of them.

We try to keep allowed-endpoints with one per line. Prettier wants to wrap them, which we fix this with prettier-ignore.

Testing

We keep around an action-test branch in carbon-lang, which can be used to test triggers with push: configurations. For example:

on:
  push:
    branches: [action-test]