carbon-language/carbon-lang

mirror of https://github.com/carbon-language/carbon-lang.git synced 2026-09-29 18:05:02 +01:00

Files

T

History

Jon Ross-PerkinsandDana Jansens f27ccbf76e Add CODEOWNERS for review assignment (#6153 )

This disables the autoassign action so that the codeowners approach can
be tested without interference.

Trying this out because it might be a path for vacation handling. See
[GitHub
docs](https://docs.github.com/en/organizations/organizing-members-into-teams/managing-code-review-settings-for-your-team)
and
[#infra](https://discord.com/channels/655572317891461132/707150492370862090/1422985757311635620)

---------

Co-authored-by: Dana Jansens <danakj@orodu.net>

2025-10-01 17:50:53 +00:00

..

auto_label_prs.yaml

Add repo flag to gh (#5669 )

2025-06-13 18:12:20 +00:00

clangd_tidy.yaml

Run clangd-tidy for the merge queue (#6041 )

2025-09-10 17:59:11 +00:00

discord_wiki.yaml

Fix stray quote in action (#4193 )

2024-08-06 23:31:44 +00:00

gh_pages_ci.yaml

Build a website. (#4189 )

2024-08-20 17:53:06 +00:00

gh_pages_deploy.yaml

Build a website. (#4189 )

2024-08-20 17:53:06 +00:00

nightly_release.yaml

Revert to Ubuntu 22 builders (#5479 )

2025-05-14 20:41:07 +00:00

pre_commit_suggestions.yaml

Update workflows for security hardening. (#4192 )

2024-08-06 23:14:23 +00:00

pre_commit.yaml

Revert to Ubuntu 22 builders (#5479 )

2025-05-14 20:41:07 +00:00

proposal_labeled.yaml

Replicate the fix in #5669 to the proposal workflow (#5671 )

2025-06-13 23:07:06 +00:00

proposal_ready.yaml

Replicate the fix in #5669 to the proposal workflow (#5671 )

2025-06-13 23:07:06 +00:00

README.md

Update workflows for security hardening. (#4192 )

2024-08-06 23:14:23 +00:00

sync_repos.yaml

Update workflows for security hardening. (#4192 )

2024-08-06 23:14:23 +00:00

tests.yaml

Revert to Ubuntu 22 builders (#5479 )

2025-05-14 20:41:07 +00:00

triage_inactive.yaml

Rename 'long term' to 'long term issue' (#5023 )

2025-02-26 22:03:58 +00:00

README.md

Workflows

Hardening

Workflows are hardened using Step Security tool. Findings for the "Harden Runner" steps are available online.

Allowed endpoints

Most jobs only have a few endpoints, but due to tools which do downloads, a few have significantly more. These are:

pre_commit.yaml (Bazel, pre-commit)
nightly_release.yaml (Bazel)
tests.yaml (Bazel)

When updating one of these, consider updating all of them.

We try to keep allowed-endpoints with one per line. Prettier wants to wrap them, which we fix this with prettier-ignore.

Testing

We keep around an action-test branch in carbon-lang, which can be used to test triggers with push: configurations. For example:

on:
  push:
    branches: [action-test]