mirror of
https://git.tukaani.org/xz.git
synced 2026-10-31 03:14:56 +00:00
0def412006
These workflows don't use any secrets other than GITHUB_TOKEN, which only has the 'contents: read' permission. That is, if an action was compromised, it shouldn't be able to modify the repository or steal any secrets. I recognize that a compromised action isn't completely harmless still. For example, the runners on GitHub have Internet access which the action could abuse until the workflow timeout (currently 10 or 20 minutes) expires. Now we always use the most recent actions instead of ones that are sometimes several months old. The hassle of updating the pinned commit IDs goes away. The benefits feel bigger than the risks. Link: https://github.com/tukaani-project/xz/pull/227
58 lines
1.2 KiB
YAML
58 lines
1.2 KiB
YAML
# SPDX-License-Identifier: 0BSD
|
|
|
|
name: FreeBSD
|
|
|
|
on:
|
|
push:
|
|
branches: [ master, ci_run ]
|
|
workflow_dispatch:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
FreeBSD:
|
|
strategy:
|
|
matrix:
|
|
include:
|
|
- host: ubuntu-latest
|
|
version: 12.4
|
|
arch: x86_64
|
|
- host: ubuntu-latest
|
|
version: 15.0
|
|
arch: x86_64
|
|
# NOTE: Comment in the repo says that aarch64 VM is faster
|
|
# on x86_64 host compared to ubuntu-24.04-arm.
|
|
# - host: ubuntu-24.04-arm
|
|
# version: 15.0
|
|
# arch: aarch64
|
|
|
|
runs-on: ${{ matrix.host }}
|
|
timeout-minutes: 10
|
|
|
|
name: FreeBSD
|
|
|
|
steps:
|
|
- uses: actions/checkout@v7
|
|
|
|
- name: Test in FreeBSD
|
|
uses: vmactions/freebsd-vm@v1
|
|
with:
|
|
release: ${{ matrix.release }}
|
|
arch: ${{ matrix.arch }}
|
|
usesh: true
|
|
prepare: >
|
|
pkg install -y
|
|
autoconf
|
|
automake
|
|
gettext-tools
|
|
libtool
|
|
m4
|
|
po4a
|
|
run: |
|
|
set -e
|
|
uname -a
|
|
./autogen.sh
|
|
./configure --disable-static --enable-debug --enable-werror
|
|
make -j4 check
|