https://github.com/actions/checkout/releases/tag/v5.0.0 was released a couple of days ago (still new, sufficient bake time that there probably is not a significant security issue). There are few changes, with the most notable ones being dependency bumps, specifically the node version bump to v24. This requires actions runner v2.327.1. I will land this after all of the infrastructure has been moved over to the new runner version.
35 lines
937 B
YAML
35 lines
937 B
YAML
name: Commit Access Review
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
schedule:
|
|
# * is a special character in YAML so you have to quote this string
|
|
- cron: '0 7 1 * *'
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
commit-access-review:
|
|
if: github.repository_owner == 'llvm'
|
|
runs-on: ubuntu-24.04
|
|
steps:
|
|
- name: Fetch LLVM sources
|
|
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
|
|
|
|
- name: Install dependencies
|
|
run: |
|
|
pip install --require-hashes -r ./llvm/utils/git/requirements.txt
|
|
|
|
- name: Run Script
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.RELEASE_TASKS_USER_TOKEN }}
|
|
run: |
|
|
python3 .github/workflows/commit-access-review.py $GITHUB_TOKEN
|
|
|
|
- name: Upload Triage List
|
|
uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 #v4.3.0
|
|
with:
|
|
name: triagers
|
|
path: triagers.log
|