carbon-language/carbon-lang

mirror of https://github.com/carbon-language/carbon-lang.git synced 2026-09-24 22:02:23 +01:00

Files

T

History

Chandler Carruth 0e308e0739 Switch to a manual check status for dependent PRs (#7117 )

The labeling script will now directly set a check status for the PR as
`pending` when it marks something as dependent, and clear it when it no
longer is. This emulates a check that starts when marked as dependent
and runs until the last dependency lands, allowing automerge and other
workflows to work cleanly.

The branch protection rule will have to be updated to the new spelling.

This should do the same key thing as #7113, but integrated to the new
script.

Assisted-by: Antigravity with Gemini

2026-04-28 02:01:57 +00:00

..

auto_label_prs.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

check_dependent_pr.yaml

Switch to a manual check status for dependent PRs (#7117 )

2026-04-28 02:01:57 +00:00

clangd_tidy.yaml

Fully switch to the new compilation database system (#7057 )

2026-04-14 13:41:33 +00:00

discord_wiki.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

gh_pages_ci.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

gh_pages_deploy.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

nightly_release.yaml

Update the name of the bazel target to build the nightly tarball (#7080 )

2026-04-20 17:59:55 +00:00

pre_commit_suggestions.yaml

Remove jonmeow from pre-commit config (#6966 )

2026-03-25 23:01:20 +00:00

pre_commit.yaml

Allow uploads.github.com (#6866 )

2026-03-09 18:21:08 +00:00

proposal_labeled.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

proposal_ready.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

README.md

Update clangd-tidy endpoint whitelist (#6855 )

2026-03-09 03:23:22 +00:00

sync_repos.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

tests.yaml

Add ASan to post-merge CI and improve the action structure for GitHub (#7012 )

2026-04-09 20:37:23 +00:00

triage_inactive.yaml

Update action versions (#6848 )

2026-03-06 22:19:44 +00:00

README.md

Workflows

Hardening

Workflows are hardened using Step Security tool. Findings for the "Harden Runner" steps are available online.

Allowed endpoints

Most jobs only have a few endpoints, but due to tools which do downloads, a few have significantly more. These are:

clangd_tidy.yaml (Bazel)
pre_commit.yaml (Bazel, pre-commit)
nightly_release.yaml (Bazel)
tests.yaml (Bazel)

When updating one of these, consider updating all of them.

We try to keep allowed-endpoints with one per line. Prettier wants to wrap them, which we fix this with prettier-ignore.

Testing

We keep around an action-test branch in carbon-lang, which can be used to test triggers with push: configurations. For example:

on:
  push:
    branches: [action-test]