Skip to content

Bump step-security/harden-runner from 2.15.0 to 2.15.1 #1027

Bump step-security/harden-runner from 2.15.0 to 2.15.1

Bump step-security/harden-runner from 2.15.0 to 2.15.1 #1027

Workflow file for this run

name: DevContainer
on:
push:
branches: [main, dev]
pull_request:
branches: [main, dev]
permissions:
contents: read
jobs:
devcontainer:
name: DevContainer Build & Test
runs-on: ubuntu-latest
steps:
- name: Harden the runner (Audit all outbound calls)
uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
with:
egress-policy: audit
- name: Checkout repository
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Cache Docker layers
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
with:
path: /tmp/.buildx-cache
key: devcontainer-${{ runner.os }}-${{ github.sha }}
restore-keys: |
devcontainer-${{ runner.os }}-
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
- name: Build DevContainer image
uses: devcontainers/ci@8bf61b26e9c3a98f69cb6ce2f88d24ff59b785c6 # v0.3.1900000417
with:
runCmd: |
echo "Installing test dependencies..."
pip install -e .[development,docs,casts]
echo "Running pre-commit checks..."
pre-commit run --all-files
echo "Running unit tests..."
python -m pytest tests
echo "Building documentation..."
make -C doc html
make -C doc/landing-page html