Skip to content

Commit f2aa458

Browse files
son-ozson-oz
authored
chore: Update CODEOWNERS and yamlfix rules (#341)
* chore: Update CODEOWNERS * chore: Update yamlfix rules and fix some YAML files
1 parent 12213b3 commit f2aa458

21 files changed

+105
-150
lines changed

‎.github/actions/prepare/action.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ runs:
1414
using: composite
1515
steps:
1616
- name: setup rust tool chain
17-
uses: dtolnay/[email protected] # v1.86.0
17+
uses: dtolnay/[email protected] # v1.86.0
1818
with:
1919
components: ${{ (inputs.components != '') && format('{0}, rustfmt, clippy', inputs.components) || 'rustfmt, clippy' }}
2020
- name: Prepare cache identifiers
@@ -24,7 +24,7 @@ runs:
2424
echo "DATE=$(date +'%Y-%m-%d')" >> $GITHUB_ENV
2525
echo "LOCK_HASH=$(sha256sum Cargo.lock | cut -d' ' -f1)" >> $GITHUB_ENV
2626
- name: Restore cargo dependencies from cache
27-
uses: Swatinem/rust-cache@f0deed1e0edfc6a9be95417288c0e1099b1eeec3 # v2.7.7
27+
uses: Swatinem/rust-cache@f0deed1e0edfc6a9be95417288c0e1099b1eeec3 # v2.7.7
2828
id: cache
2929
with:
3030
shared-key: ${{ env.DATE }}-${{ env.LOCK_HASH }}

‎.github/workflows/ci.yaml‎

Lines changed: 13 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -31,12 +31,11 @@ jobs:
3131
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
3232
with:
3333
egress-policy: audit
34-
3534
- name: Checkout Code
36-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
35+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3736
- name: Get changed files
3837
id: changed-files-yaml
39-
uses: tj-actions/changed-files@d6e91a2266cdb9d62096cebf1e8546899c6aa18f # v45.0.6
38+
uses: tj-actions/changed-files@d6e91a2266cdb9d62096cebf1e8546899c6aa18f # v45.0.6
4039
with:
4140
files_yaml: |
4241
code:
@@ -67,7 +66,6 @@ jobs:
6766
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
6867
with:
6968
egress-policy: audit
70-
7169
- name: Failed
7270
run: exit 1
7371
if: contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled')
@@ -83,9 +81,8 @@ jobs:
8381
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
8482
with:
8583
egress-policy: audit
86-
8784
- name: Checkout Code
88-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
85+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
8986
- name: Prepare
9087
id: init
9188
uses: ./.github/actions/prepare
@@ -111,9 +108,8 @@ jobs:
111108
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
112109
with:
113110
egress-policy: audit
114-
115111
- name: Checkout Code
116-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
112+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
117113
- name: Prepare
118114
id: init
119115
uses: ./.github/actions/prepare
@@ -139,9 +135,8 @@ jobs:
139135
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
140136
with:
141137
egress-policy: audit
142-
143138
- name: Checkout Code
144-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
139+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
145140
- name: Prepare
146141
id: init
147142
uses: ./.github/actions/prepare
@@ -167,9 +162,8 @@ jobs:
167162
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
168163
with:
169164
egress-policy: audit
170-
171165
- name: Checkout Code
172-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
166+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
173167
- name: Prepare
174168
id: init
175169
uses: ./.github/actions/prepare
@@ -207,7 +201,7 @@ jobs:
207201

208202
# Upload unit coverage
209203
- name: Upload Unit Coverage to Codecov
210-
uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
204+
uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
211205
with:
212206
token: ${{ secrets.CODECOV_TOKEN }}
213207
name: unit-coverage
@@ -217,7 +211,7 @@ jobs:
217211

218212
# Upload integration coverage
219213
- name: Upload Integration Coverage to Codecov
220-
uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
214+
uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
221215
with:
222216
token: ${{ secrets.CODECOV_TOKEN }}
223217
name: integration-coverage
@@ -227,7 +221,7 @@ jobs:
227221

228222
# Upload properties coverage
229223
- name: Upload Properties Coverage to Codecov
230-
uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
224+
uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
231225
with:
232226
token: ${{ secrets.CODECOV_TOKEN }}
233227
name: properties-coverage
@@ -246,24 +240,23 @@ jobs:
246240
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
247241
with:
248242
egress-policy: audit
249-
250243
- name: Checkout Code
251-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
244+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
252245
- name: Prepare
253246
id: init
254247
uses: ./.github/actions/prepare
255248
- name: Set up Docker Buildx
256-
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
249+
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
257250
- name: Build local container
258-
uses: docker/build-push-action@1dc73863535b631f98b2378be8619f83b136f4a0 # v6.17.0
251+
uses: docker/build-push-action@1dc73863535b631f98b2378be8619f83b136f4a0 # v6.17.0
259252
with:
260253
tags: openzeppelin-monitor-dev:${{ github.sha }}
261254
push: false
262255
load: true
263256
file: Dockerfile.development
264257
platforms: linux/amd64
265258
- name: Scan image
266-
uses: anchore/scan-action@df395807f4554463d4455b8047cf58e37b6acaae # v6.5.0
259+
uses: anchore/scan-action@df395807f4554463d4455b8047cf58e37b6acaae # v6.5.0
267260
with:
268261
image: openzeppelin-monitor-dev:${{ github.sha }}
269262
fail-build: true

‎.github/workflows/cla.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,11 +17,11 @@ jobs:
1717
runs-on: ubuntu-latest
1818
steps:
1919
- name: Harden the runner (Audit all outbound calls)
20-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
20+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
2121
with:
2222
egress-policy: audit
2323
- name: Checkout Private Repo for Allowlist
24-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
24+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2525
with:
2626
repository: OpenZeppelin/cla-sigs
2727
token: ${{ secrets.CLA_SIGS_ACCESS_PAT }}
@@ -46,7 +46,7 @@ jobs:
4646
continue-on-error: true
4747
id: cla_assistant
4848
if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I confirm that I have read and hereby agree to the OpenZeppelin Contributor License Agreement') || github.event_name == 'pull_request_target'
49-
uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08 # v2.6.1
49+
uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08 # v2.6.1
5050
env:
5151
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
5252
PERSONAL_ACCESS_TOKEN: ${{ secrets.CLA_SIGS_ACCESS_PAT }}

‎.github/workflows/codeql.yml‎

Lines changed: 24 additions & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,14 @@
1-
name: "CodeQL Advanced"
2-
1+
---
2+
name: CodeQL Advanced
33
on:
44
push:
5-
branches: [ "main" ]
5+
branches: [main]
66
pull_request:
7-
branches: [ "main" ]
7+
branches: [main]
88
schedule:
9-
- cron: '20 2 * * 3'
10-
9+
- cron: 20 2 * * 3
1110
permissions:
1211
contents: read
13-
1412
jobs:
1513
analyze:
1614
name: Analyze (${{ matrix.language }})
@@ -25,34 +23,29 @@ jobs:
2523
# only required for workflows in private repositories
2624
# actions: read
2725
# contents: read
28-
2926
strategy:
3027
fail-fast: false
3128
matrix:
3229
include:
33-
- language: actions
34-
build-mode: none
35-
- language: rust
36-
build-mode: none
30+
- language: actions
31+
build-mode: none
32+
- language: rust
33+
build-mode: none
3734
steps:
38-
- name: Harden the runner (Audit all outbound calls)
39-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
40-
with:
41-
egress-policy: audit
42-
43-
- name: Checkout repository
44-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.5.4
35+
- name: Harden the runner (Audit all outbound calls)
36+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
37+
with:
38+
egress-policy: audit
39+
- name: Checkout repository
40+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.5.4
4541

4642
# Initializes the CodeQL tools for scanning.
47-
- name: Initialize CodeQL
48-
uses: github/codeql-action/init@d6bbdef45e766d081b84a2def353b0055f728d3e # v3.29.3
49-
with:
50-
languages: ${{ matrix.language }}
51-
build-mode: ${{ matrix.build-mode }}
52-
53-
- name: Perform CodeQL Analysis
54-
uses: github/codeql-action/analyze@d6bbdef45e766d081b84a2def353b0055f728d3e # v3.29.3
55-
56-
with:
57-
category: "/language:${{matrix.language}}"
58-
43+
- name: Initialize CodeQL
44+
uses: github/codeql-action/init@d6bbdef45e766d081b84a2def353b0055f728d3e # v3.29.3
45+
with:
46+
languages: ${{ matrix.language }}
47+
build-mode: ${{ matrix.build-mode }}
48+
- name: Perform CodeQL Analysis
49+
uses: github/codeql-action/analyze@d6bbdef45e766d081b84a2def353b0055f728d3e # v3.29.3
50+
with:
51+
category: /language:${{matrix.language}}

‎.github/workflows/pr-title.yaml‎

Lines changed: 2 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,9 @@
11
---
22
name: PR Title
3-
43
on:
54
pull_request:
6-
branches:
7-
- main
5+
branches: [main]
86
types: [opened, edited, reopened, synchronize]
9-
107
jobs:
118
validate:
129
runs-on: ubuntu-latest
@@ -15,8 +12,7 @@ jobs:
1512
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
1613
with:
1714
egress-policy: audit
18-
19-
- uses: thehanimo/pr-title-checker@7fbfe05602bdd86f926d3fb3bccb6f3aed43bc70 # v1.4.3
15+
- uses: thehanimo/pr-title-checker@7fbfe05602bdd86f926d3fb3bccb6f3aed43bc70 # v1.4.3
2016
with:
2117
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
2218
configuration_path: .github/pr-title-checker-config.json

‎.github/workflows/rc.yml‎

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -26,8 +26,7 @@ jobs:
2626
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
2727
with:
2828
egress-policy: audit
29-
30-
- uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2.0.2
29+
- uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2.0.2
3130
id: gh-app-token
3231
with:
3332
app-id: ${{ vars.GH_APP_ID }}
@@ -53,7 +52,7 @@ jobs:
5352
env:
5453
INPUT_VERSION: ${{ github.event.inputs.version }}
5554
- name: Checkout repository at commit SHA
56-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
55+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
5756
with:
5857
ref: ${{ github.event.inputs.commit_sha }}
5958
fetch-depth: 0

‎.github/workflows/release-bins.yml‎

Lines changed: 6 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -42,15 +42,14 @@ jobs:
4242
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
4343
with:
4444
egress-policy: audit
45-
4645
- name: Get github app token
47-
uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2.0.2
46+
uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2.0.2
4847
id: gh-app-token
4948
with:
5049
app-id: ${{ vars.GH_APP_ID }}
5150
private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
5251
- name: Checkout sources
53-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
52+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
5453
with:
5554
ref: ${{ env.TAG }}
5655
token: ${{ steps.gh-app-token.outputs.token }}
@@ -68,7 +67,7 @@ jobs:
6867
openzeppelin-monitor-${{ env.TAG }}-${{ matrix.arch }}.tar.gz \
6968
openzeppelin-monitor
7069
- name: Upload artifact
71-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
70+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
7271
with:
7372
name: openzeppelin-monitor-${{ matrix.arch }}
7473
path: |
@@ -92,20 +91,19 @@ jobs:
9291
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
9392
with:
9493
egress-policy: audit
95-
9694
- name: Get github app token
97-
uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2.0.2
95+
uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2.0.2
9896
id: gh-app-token
9997
with:
10098
app-id: ${{ vars.GH_APP_ID }}
10199
private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
102100
- name: Checkout sources
103-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
101+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
104102
with:
105103
ref: ${{ env.TAG }}
106104
token: ${{ steps.gh-app-token.outputs.token }}
107105
- name: Download artifacts
108-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
106+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
109107
with:
110108
pattern: openzeppelin-monitor-*
111109
path: artifacts

‎.github/workflows/release-docker.yml‎

Lines changed: 8 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -21,28 +21,27 @@ jobs:
2121
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
2222
with:
2323
egress-policy: audit
24-
2524
- name: Slack notification
26-
uses: act10ns/slack@44541246747a30eb3102d87f7a4cc5471b0ffb7d # v2.1.0
25+
uses: act10ns/slack@44541246747a30eb3102d87f7a4cc5471b0ffb7d # v2.1.0
2726
with:
2827
status: starting
2928
steps: ${{ toJson(steps) }}
3029
channel: ${{ env.SLACK_CHANNEL }}
3130
message: Starting docker build and push to dockerhub for ${{ github.repository }} with tag ${{ inputs.tag }}......
3231
if: always()
3332
- name: Get github app token
34-
uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2.0.2
33+
uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2.0.2
3534
id: gh-app-token
3635
with:
3736
app-id: ${{ vars.GH_APP_ID }}
3837
private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
3938
- name: Checkout release branch
40-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
39+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
4140
with:
4241
ref: ${{ inputs.tag }}
4342
- name: Docker meta
4443
id: meta
45-
uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
44+
uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
4645
with:
4746
# list of Docker images to use as base name for tags
4847
images: ${{ env.DOCKERHUB_IMAGE }}
@@ -66,9 +65,9 @@ jobs:
6665
username: ${{ vars.DOCKERHUB_USERNAME }}
6766
password: ${{ secrets.DOCKERHUB_PAT }}
6867
- name: Set Up Docker Buildx
69-
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
68+
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
7069
- name: Build Docker image
71-
uses: docker/build-push-action@1dc73863535b631f98b2378be8619f83b136f4a0 # v6.17.0
70+
uses: docker/build-push-action@1dc73863535b631f98b2378be8619f83b136f4a0 # v6.17.0
7271
id: build
7372
with:
7473
context: .
@@ -82,7 +81,7 @@ jobs:
8281
tags: ${{ steps.meta.outputs.tags }}
8382
labels: ${{ steps.meta.outputs.labels }}
8483
- name: Attest
85-
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
84+
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
8685
id: attest
8786
with:
8887
subject-name: docker.io/${{ env.DOCKERHUB_IMAGE }}
@@ -98,7 +97,7 @@ jobs:
9897
short-description: ${{ github.event.repository.description }}
9998
readme-filepath: ./DOCKER_README.md
10099
- name: Slack notification success or failure
101-
uses: act10ns/slack@44541246747a30eb3102d87f7a4cc5471b0ffb7d # v2.1.0
100+
uses: act10ns/slack@44541246747a30eb3102d87f7a4cc5471b0ffb7d # v2.1.0
102101
with:
103102
status: ${{ job.status }}
104103
steps: ${{ toJson(steps) }}

0 commit comments

Comments
 (0)