more duplication #3
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Part of the Carbon Language project, under the Apache License v2.0 with LLVM | |
| # Exceptions. See /LICENSE for license information. | |
| # SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception | |
| name: 'Clang Tidy' | |
| on: | |
| push: | |
| branches: [trunk, action-test] | |
| pull_request: | |
| permissions: | |
| contents: read # For actions/checkout. | |
| pull-requests: read # For dorny/paths-filter to read pull requests. | |
| # Cancel previous workflows on the PR when there are multiple fast commits. | |
| # https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#concurrency | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.head_ref || github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| test: | |
| runs-on: ubuntu-22.04 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1 | |
| with: | |
| egress-policy: block | |
| # When adding endpoints, see README.md. | |
| # prettier-ignore | |
| allowed-endpoints: > | |
| *.dl.sourceforge.net:443 | |
| api.github.com:443 | |
| bcr.bazel.build:443 | |
| downloads.sourceforge.net:443 | |
| github.com:443 | |
| mirrors.kernel.org:443 | |
| nodejs.org:443 | |
| oauth2.googleapis.com:443 | |
| objects.githubusercontent.com:443 | |
| pypi.org:443 | |
| releases.bazel.build:443 | |
| sourceforge.net:443 | |
| storage.googleapis.com:443 | |
| # Checkout the pull request head or the branch. | |
| - name: Checkout pull request | |
| if: github.event_name == 'pull_request' | |
| uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 | |
| with: | |
| ref: ${{ github.event.pull_request.head.sha }} | |
| - name: Checkout branch | |
| if: github.event_name != 'pull_request' | |
| uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 | |
| - uses: ./.github/actions/test | |
| with: | |
| matrix_runner: 'ubuntu-22.04' | |
| matrix_build_mode: 'clang-tidy' | |
| base_sha: | |
| ${{ github.event_name == 'pull_request' && | |
| github.event.pull_request.base.sha || | |
| github.event.merge_group.base_sha }} | |
| remote_cache_upload: ${{ env.remote_cache_upload }} | |
| remote_cache_key: ${{ secrets.CARBON_BUILDS_GITHUB }} |