actions/install-action
1
0
Fork 0
mirror of https://github.com/taiki-e/install-action.git synced 2026-04-21 15:10:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

Avoid triggering zizmor ref-confusion

Browse Source
This commit is contained in:
Taiki Endo
2026-03-09 00:28:28 +09:00
parent 7c8485f106
commit 93ea0b33c3
2 changed files with 10 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
CHANGELOG.md
View File

@@ -10,6 +10,8 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
## [Unreleased] ## [Unreleased]
- Avoid triggering [zizmor ref-confusion](https://docs.zizmor.sh/audits/#ref-confusion) when using this action in form of `uses: taiki-e/install-action@v2` or `uses: taiki-e/install-action@<tool_name>`.
## [2.68.23] - 2026-03-08 ## [2.68.23] - 2026-03-08
- Update `zizmor@latest` to 1.23.0. - Update `zizmor@latest` to 1.23.0.

14
tools/publish.sh
View File

@@ -121,9 +121,9 @@ retry git push origin refs/heads/main
retry git push origin refs/tags/"${tag}" retry git push origin refs/tags/"${tag}"
major_version_tag="v${version%%.*}" major_version_tag="v${version%%.*}"
git branch "${major_version_tag}" git branch "releases/${major_version_tag}"
git tag -f "${major_version_tag}" git tag -f "${major_version_tag}"
refs=("refs/heads/${major_version_tag}" "+refs/tags/${major_version_tag}") refs=("refs/heads/releases/${major_version_tag}" "+refs/tags/${major_version_tag}")
tools=() tools=()
for tool in tools/codegen/base/*.json; do for tool in tools/codegen/base/*.json; do
@@ -142,8 +142,9 @@ tools+=(
# Non-manifest-based tools. # Non-manifest-based tools.
tools+=(valgrind) tools+=(valgrind)
branches=()
for tool in "${tools[@]}"; do for tool in "${tools[@]}"; do
git checkout -b "${tool}" git checkout -b "releases/${tool}"
sed -E "${in_place[@]}" action.yml \ sed -E "${in_place[@]}" action.yml \
-e "s/required: true/required: false/g" \ -e "s/required: true/required: false/g" \
-e "s/# default: #publish:tool/default: ${tool}/g" -e "s/# default: #publish:tool/default: ${tool}/g"
@@ -151,11 +152,12 @@ for tool in "${tools[@]}"; do
git commit -m "${tool}" git commit -m "${tool}"
git tag -f "${tool}" git tag -f "${tool}"
git checkout main git checkout main
refs+=("+refs/heads/${tool}" "+refs/tags/${tool}") refs+=("+refs/heads/releases/${tool}" "+refs/tags/${tool}")
branches+=("releases/${tool}")
done done
retry git push origin --atomic "${refs[@]}" retry git push origin --atomic "${refs[@]}"
git branch -d "${major_version_tag}" git branch -d "releases/${major_version_tag}"
git branch -D "${tools[@]}" git branch -D "${branches[@]}"
schema_workspace=/tmp/workspace schema_workspace=/tmp/workspace
rm -rf -- "${schema_workspace}" rm -rf -- "${schema_workspace}"