Skip to content

No public description #3526

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
copybara-service wants to merge 1 commit into
base: main
Choose a base branch
from
Open

No public description #3526

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .github/workflows/build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,8 +12,8 @@

permissions:
contents: read
actions: write # to cancel previous workflows

Check failure on line 15 in .github/workflows/build.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

build.yml:15: overly broad permissions: actions: write is overly broad at the workflow level
statuses: write

Check warning on line 16 in .github/workflows/build.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

build.yml:16: overly broad permissions: statuses: write is overly broad at the workflow level

concurrency:
group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
Expand Down Expand Up @@ -124,9 +124,9 @@
# - python-version: "3.12" # TODO(jakevdp): update to 3.13 when tf supports it.
# jax-version: "nightly"
steps:
- uses: actions/checkout@v6

Check failure on line 127 in .github/workflows/build.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 127 in .github/workflows/build.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

build.yml:127: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- name: Set up Python ${{ matrix.python-version }}
uses: actions/setup-python@v6

Check failure on line 129 in .github/workflows/build.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 129 in .github/workflows/build.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

build.yml:129: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
python-version: ${{ matrix.python-version }}
- name: Extract branch name
Expand Down Expand Up @@ -251,7 +251,7 @@
if: always()
shell: bash
run: |
status="${{ job.status }}"

Check failure on line 254 in .github/workflows/build.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/template-injection 

code injection via template expansion: may expand into attacker-controllable code
lowercase_status=$(echo $status | tr '[:upper:]' '[:lower:]')
curl -sS --request POST \
--url https://api.github.com/repos/${{ github.repository }}/statuses/${{ github.sha }} \
Expand All @@ -267,6 +267,7 @@
multiprocess-unit-tests:
name: "multiprocess-unit-tests (Python ${{ matrix.python-version }}, jax=${{ matrix.jax-version }})"
runs-on: linux-x86-ct6e-180-8tpu
continue-on-error: true
container: us-docker.pkg.dev/ml-oss-artifacts-published/ml-public-container/ml-build:infrastructure-public-image-2d2a7b1e6e2e
defaults:
run:
Expand Down Expand Up @@ -310,7 +311,7 @@
if: always()
shell: bash
run: |
status="${{ job.status }}"

Check failure on line 314 in .github/workflows/build.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/template-injection 

code injection via template expansion: may expand into attacker-controllable code
lowercase_status=$(echo $status | tr '[:upper:]' '[:lower:]')
curl -sS --request POST \
--url https://api.github.com/repos/${{ github.repository }}/statuses/${{ github.sha }} \
Expand Down
Loading