mirror of
https://github.com/prometheus/prometheus.git
synced 2026-10-28 18:59:35 +08:00
Remove cache from publish workflows https://docs.zizmor.sh/audits/#cache-poisoning
Signed-off-by: Arthur Silva Sens <arthursens2005@gmail.com>
This commit is contained in:
1 file changed
+3
-6
@@ -188,6 +188,7 @@ jobs:
|
||||
- uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
|
||||
with:
|
||||
go-version: 1.27.x
|
||||
cache: false
|
||||
- run: |
|
||||
$TestTargets = go list ./... | Where-Object { $_ -NotMatch "(github.com/prometheus/prometheus/config|github.com/prometheus/prometheus/web)"}
|
||||
go test $TestTargets -vet=off -v
|
||||
@@ -355,6 +356,7 @@ jobs:
|
||||
uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
|
||||
with:
|
||||
go-version: 1.27.x
|
||||
cache: false
|
||||
- name: Install snmp_exporter/generator dependencies
|
||||
run: sudo apt-get update && sudo apt-get -y install libsnmp-dev
|
||||
if: github.repository == 'prometheus/snmp_exporter'
|
||||
@@ -450,18 +452,13 @@ jobs:
|
||||
with:
|
||||
node-version-file: "web/ui/.nvmrc"
|
||||
registry-url: "https://registry.npmjs.org"
|
||||
package-manager-cache: false
|
||||
- uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
|
||||
with:
|
||||
# Exclude the broken pnpm 11.12.0 (self-installer crash, see
|
||||
# https://github.com/pnpm/action-setup/issues/276) while still
|
||||
# picking up future 11.x releases that fix it.
|
||||
version: "<13.0.0"
|
||||
- uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
|
||||
with:
|
||||
path: ~/.local/share/pnpm/store
|
||||
key: ${{ runner.os }}-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}
|
||||
restore-keys: |
|
||||
${{ runner.os }}-pnpm-
|
||||
- name: Check libraries version
|
||||
if: |
|
||||
(github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v2.'))
|
||||
|
||||
Reference in new issue
Block a user