Skip to content

[PD1-138] Fix zizmor findings #5

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
joshuanapoli merged 1 commit into from
Aug 19, 2026
Merged

[PD1-138] Fix zizmor findings #5

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 21 additions & 6 deletions action.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,9 +48,11 @@ runs:
id: pm
shell: bash
working-directory: ${{ inputs.working-directory }}
env:
PACKAGE_MANAGER: ${{ inputs.package-manager }}
run: |
if [ "${{ inputs.package-manager }}" != "auto" ]; then
manager="${{ inputs.package-manager }}"
if [ "$PACKAGE_MANAGER" != "auto" ]; then
manager="$PACKAGE_MANAGER"
elif [ -f uv.lock ]; then
manager="uv"
elif [ -f poetry.lock ]; then
Expand Down Expand Up @@ -125,15 +127,23 @@ runs:
# PATCH /git/refs returning 422 vs git push returning 403 with the same
# token). The API path doesn't need git credentials at all.

# $RUN is the package manager's run prefix ("uv run" or "poetry run") and $SRC_DIRS is a
# space-separated list, so both are left unquoted below to split into separate words.
- name: Run ruff format
shell: bash
working-directory: ${{ inputs.working-directory }}
run: ${{ steps.pm.outputs.run }} ruff format --exit-non-zero-on-format ${{ inputs.src-dirs }}
env:
RUN: ${{ steps.pm.outputs.run }}
SRC_DIRS: ${{ inputs.src-dirs }}
run: $RUN ruff format --exit-non-zero-on-format $SRC_DIRS

- name: Run ruff check
shell: bash
working-directory: ${{ inputs.working-directory }}
run: ${{ steps.pm.outputs.run }} ruff check --fix --exit-non-zero-on-fix ${{ inputs.src-dirs }}
env:
RUN: ${{ steps.pm.outputs.run }}
SRC_DIRS: ${{ inputs.src-dirs }}
run: $RUN ruff check --fix --exit-non-zero-on-fix $SRC_DIRS

- name: Repair
if: failure() && inputs.repair-token != ''
Expand Down Expand Up @@ -262,13 +272,18 @@ runs:
- name: Run mypy
shell: bash
working-directory: ${{ inputs.working-directory }}
run: ${{ steps.pm.outputs.run }} mypy ${{ inputs.src-dirs }}
env:
RUN: ${{ steps.pm.outputs.run }}
SRC_DIRS: ${{ inputs.src-dirs }}
run: $RUN mypy $SRC_DIRS

- name: Run pytest
if: inputs.run-pytest == 'true'
shell: bash
working-directory: ${{ inputs.working-directory }}
run: ${{ steps.pm.outputs.run }} pytest
env:
RUN: ${{ steps.pm.outputs.run }}
run: $RUN pytest

branding:
icon: check-circle
Expand Down