Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/go-sample-test.yaml
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
on:

Check warning on line 1 in .github/workflows/go-sample-test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

go-sample-test.yaml:1: overly broad permissions: default permissions used due to no permissions: block
push:
branches:
- postgresql-dialect
Expand All @@ -10,7 +10,7 @@
GOOGLE_CLOUD_DATABASE: "testdb_integration"
GOOGLE_CLOUD_ENDPOINT: "spanner.googleapis.com"
jobs:
check-env:

Check warning on line 13 in .github/workflows/go-sample-test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

go-sample-test.yaml:13: overly broad permissions: default permissions used due to no permissions: block
outputs:
has-key: ${{ steps.project-id.outputs.defined }}
runs-on: ubuntu-latest
Expand All @@ -20,29 +20,29 @@
GCP_PROJECT_ID: ${{ secrets.GCP_PROJECT_ID }}
if: "${{ env.GCP_PROJECT_ID != '' }}"
run: echo "defined=true" >> "$GITHUB_OUTPUT"
sample-test:

Check warning on line 23 in .github/workflows/go-sample-test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

go-sample-test.yaml:23: overly broad permissions: default permissions used due to no permissions: block
needs: [check-env]
if: needs.check-env.outputs.has-key == 'true'
timeout-minutes: 60
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7

Check failure on line 29 in .github/workflows/go-sample-test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 29 in .github/workflows/go-sample-test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

go-sample-test.yaml:29: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- name: Setup Java
uses: actions/setup-java@v5

Check failure on line 31 in .github/workflows/go-sample-test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 31 in .github/workflows/go-sample-test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

go-sample-test.yaml:31: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
distribution: zulu
java-version: 11
- run: java -version
- name: Setup Go
uses: actions/setup-go@v7

Check failure on line 37 in .github/workflows/go-sample-test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 37 in .github/workflows/go-sample-test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

go-sample-test.yaml:37: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
go-version: '^1.20.0'
go-version: '1.26.x'
- name: Auth
uses: google-github-actions/auth@v3

Check failure on line 41 in .github/workflows/go-sample-test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 41 in .github/workflows/go-sample-test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

go-sample-test.yaml:41: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
credentials_json: ${{ secrets.JSON_SERVICE_ACCOUNT_CREDENTIALS }}
- name: Setup GCloud
uses: google-github-actions/setup-gcloud@v3

Check failure on line 45 in .github/workflows/go-sample-test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 45 in .github/workflows/go-sample-test.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

go-sample-test.yaml:45: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
project_id: ${{ secrets.GCP_PROJECT_ID }}
- run: go version
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/integration-emulator.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@
GOOGLE_CLOUD_INSTANCE: "test-instance"
GOOGLE_CLOUD_DATABASE: "test-db"
jobs:
integration-test-emulator:

Check warning on line 13 in .github/workflows/integration-emulator.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

integration-emulator.yaml:13: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-latest
# Add a PostgreSQL Docker container and the emulator.
services:
Expand Down Expand Up @@ -39,22 +39,22 @@
matrix:
java: [11, 21]
steps:
- uses: actions/checkout@v7

Check failure on line 42 in .github/workflows/integration-emulator.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 42 in .github/workflows/integration-emulator.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

integration-emulator.yaml:42: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- name: Setup Java
uses: actions/setup-java@v5

Check failure on line 44 in .github/workflows/integration-emulator.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 44 in .github/workflows/integration-emulator.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

integration-emulator.yaml:44: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
distribution: zulu
java-version: ${{matrix.java}}
- run: java -version
- name: Setup Go
uses: actions/setup-go@v7

Check failure on line 50 in .github/workflows/integration-emulator.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 50 in .github/workflows/integration-emulator.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

integration-emulator.yaml:50: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
go-version: '^1.17.7'
go-version: '1.26.x'
- run: go version
- uses: actions/setup-python@v7

Check failure on line 54 in .github/workflows/integration-emulator.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 54 in .github/workflows/integration-emulator.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

integration-emulator.yaml:54: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
python-version: '3.14'
- uses: actions/setup-node@v7

Check failure on line 57 in .github/workflows/integration-emulator.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

integration-emulator.yaml:57: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
node-version: 24
- uses: ruby/setup-ruby@v1
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/integration.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -94,7 +94,7 @@ jobs:
- name: Setup Go
uses: actions/setup-go@v7
with:
go-version: '^1.17.7'
go-version: '1.26.x'
- run: go version
- uses: actions/setup-python@v7
with:
Expand Down
Loading