Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 5 additions & 5 deletions .github/workflows/generate.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -35,20 +35,20 @@

steps:
- name: Python Library > Checkout Repository
uses: actions/checkout@v4
uses: actions/checkout@v7

Check failure on line 38 in .github/workflows/generate.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 38 in .github/workflows/generate.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

generate.yaml:38: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
path: ${{ env.LIBRARY_CHECKOUT_PATH }}

- name: Test Data > Checkout Repository
uses: actions/checkout@v4
uses: actions/checkout@v7

Check failure on line 43 in .github/workflows/generate.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 43 in .github/workflows/generate.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

generate.yaml:43: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
repository: googleapis/google-cloudevents
path: ${{ env.DATA_SOURCE_CHECKOUT_PATH }}

- name: Setup Python
uses: actions/setup-python@v5
uses: actions/setup-python@v7

Check failure on line 49 in .github/workflows/generate.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 49 in .github/workflows/generate.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

generate.yaml:49: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
python-version: '3.13'
python-version: '3.14'
cache: 'pip'

- name: Install Generator Dependencies
Expand Down Expand Up @@ -84,7 +84,7 @@

- name: Create a pull request with updates
# https://github.com/googleapis/code-suggester#Action
uses: googleapis/code-suggester@v5

Check failure on line 87 in .github/workflows/generate.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 87 in .github/workflows/generate.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

generate.yaml:87: unpinned action reference: action is not pinned to a hash (required by blanket policy)
env:
# Provided by the GitHub Automation team
ACCESS_TOKEN: ${{ secrets.YOSHI_CODE_BOT_TOKEN }}
Expand Down Expand Up @@ -113,12 +113,12 @@

- name: Notify for failure
if: ${{ failure() && github.event_name == 'schedule' }}
uses: actions/github-script@v7
uses: actions/github-script@v9

Check failure on line 116 in .github/workflows/generate.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 116 in .github/workflows/generate.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

generate.yaml:116: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
script: |
github.rest.issues.create({
owner: context.repo.owner,
repo: context.repo.repo,
title: 'Library generation failed (${{ steps.source-version.outputs.revision }})',

Check failure on line 122 in .github/workflows/generate.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/template-injection

code injection via template expansion: may expand into attacker-controllable code
body: `See [failed job](https://github.com/${context.repo.owner}/${context.repo.repo}/actions/runs/${context.runId})`,
});
8 changes: 4 additions & 4 deletions .github/workflows/test_generation.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -36,20 +36,20 @@

steps:
- name: Python Library > Checkout Repository
uses: actions/checkout@v4
uses: actions/checkout@v7

Check failure on line 39 in .github/workflows/test_generation.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 39 in .github/workflows/test_generation.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

test_generation.yaml:39: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
path: ${{ env.LIBRARY_CHECKOUT_PATH }}

- name: Proto Schemas > Checkout Repository
uses: actions/checkout@v4
uses: actions/checkout@v7

Check failure on line 44 in .github/workflows/test_generation.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 44 in .github/workflows/test_generation.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

test_generation.yaml:44: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
repository: googleapis/google-cloudevents
path: ${{ env.DATA_SOURCE_CHECKOUT_PATH }}

- name: Setup Python
uses: actions/setup-python@v5
uses: actions/setup-python@v7

Check failure on line 50 in .github/workflows/test_generation.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 50 in .github/workflows/test_generation.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

test_generation.yaml:50: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
python-version: '3.13'
python-version: '3.14'
cache: 'pip'

- name: Install Generator Dependencies
Expand Down
6 changes: 3 additions & 3 deletions scripts/requirements.txt
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
gapic_generator==1.23.6
grpcio-tools==1.71.0
pypandoc_binary==1.15
gapic_generator==1.38.0
grpcio-tools==1.83.0
pypandoc_binary==1.17
requests==2.32.4
Loading