From 91957d9b9a09589c6387ad5f91d6eed105fa5997 Mon Sep 17 00:00:00 2001 From: Parthiv Seetharaman Date: Wed, 21 Oct 2026 17:25:26 +0000 Subject: [PATCH] ci: follow scan-action runtime ref Co-Authored-By: Codex --- .github/workflows/code-scan.yaml | 28 ++++++++++++++++++---------- 1 file changed, 18 insertions(+), 10 deletions(-) diff --git a/.github/workflows/code-scan.yaml b/.github/workflows/code-scan.yaml index 3cb29e9..50e9dd7 100644 --- a/.github/workflows/code-scan.yaml +++ b/.github/workflows/code-scan.yaml @@ -37,18 +37,22 @@ jobs: token: ${{ secrets.VBUILD_ACTION_READ_PAT }} path: .vbuild-actions/vbuild-scan-action + - name: Prepare local VBuild dependency + id: prepare-vbuild + run: | + action=.vbuild-actions/vbuild-scan-action/action.yaml + dependency=$(grep -oE "eqtylab/vbuild-action@[^[:space:]\"']+" "$action") + echo "ref=${dependency#*@}" >> "$GITHUB_OUTPUT" + sed -i -E "s|eqtylab/vbuild-action@[^[:space:]\"']+|./.vbuild-actions/vbuild-action|" "$action" + - name: Checkout vbuild action uses: actions/checkout@v4 with: repository: eqtylab/vbuild-action - ref: v0.12.0 + ref: ${{ steps.prepare-vbuild.outputs.ref }} token: ${{ secrets.VBUILD_ACTION_READ_PAT }} path: .vbuild-actions/vbuild-action - - name: Patch scan action to use local vbuild-action - run: | - sed -i 's|uses: eqtylab/vbuild-action@v[0-9.]*|uses: ./.vbuild-actions/vbuild-action|' .vbuild-actions/vbuild-scan-action/action.yaml - - name: Code & Security Scan uses: ./.vbuild-actions/vbuild-scan-action with: @@ -84,18 +88,22 @@ jobs: token: ${{ secrets.VBUILD_ACTION_READ_PAT }} path: .vbuild-actions/vbuild-scan-action + - name: Prepare local VBuild dependency + id: prepare-vbuild + run: | + action=.vbuild-actions/vbuild-scan-action/action.yaml + dependency=$(grep -oE "eqtylab/vbuild-action@[^[:space:]\"']+" "$action") + echo "ref=${dependency#*@}" >> "$GITHUB_OUTPUT" + sed -i -E "s|eqtylab/vbuild-action@[^[:space:]\"']+|./.vbuild-actions/vbuild-action|" "$action" + - name: Checkout vbuild action uses: actions/checkout@v4 with: repository: eqtylab/vbuild-action - ref: v0.12.0 + ref: ${{ steps.prepare-vbuild.outputs.ref }} token: ${{ secrets.VBUILD_ACTION_READ_PAT }} path: .vbuild-actions/vbuild-action - - name: Patch scan action to use local vbuild-action - run: | - sed -i 's|uses: eqtylab/vbuild-action@v[0-9.]*|uses: ./.vbuild-actions/vbuild-action|' .vbuild-actions/vbuild-scan-action/action.yaml - - name: Install Rust toolchain run: | curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | \