| Age | Commit message (Collapse) | Author |
|
The PR event doesn't include the actual commits, just a count and a URL
to fetch it.
But we can checkout the entire git history, we don't have so many
commits that we need to optimize this just yet.
And then we might as well use `git` itself to walk the commit history.
(Using the remote commits URL would be useful only if we'd want to do a
shallow clone because we have too many commits)
Signed-off-by: Edwin Török <[email protected]>
|
|
|
|
|
|
Hopefully. See #9286.
|
|
This CI action has been broken for a long time, giving us false
negatives.
|
|
|
|
|
|
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
|
This limits the damage that a compromised GitHub action could do.
See https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
|
|
* [CI] Fix commit message length check
* [CI] Smarter commit message length check
* [CI] Fix commit message length check for new branches
* [CI] Output offending commits
|