Spaces:
Running
Running
Harden CI credential and lock handling
Browse files- .github/workflows/ci.yml +3 -1
.github/workflows/ci.yml
CHANGED
|
@@ -22,6 +22,8 @@ jobs:
|
|
| 22 |
steps:
|
| 23 |
- name: Check out repository
|
| 24 |
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
|
|
|
|
|
|
| 25 |
|
| 26 |
- name: Install uv and Python
|
| 27 |
uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
|
|
@@ -31,7 +33,7 @@ jobs:
|
|
| 31 |
enable-cache: true
|
| 32 |
|
| 33 |
- name: Sync locked dependencies
|
| 34 |
-
run: uv sync --
|
| 35 |
|
| 36 |
- name: Lint
|
| 37 |
run: uv run --frozen ruff check .
|
|
|
|
| 22 |
steps:
|
| 23 |
- name: Check out repository
|
| 24 |
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
| 25 |
+
with:
|
| 26 |
+
persist-credentials: false
|
| 27 |
|
| 28 |
- name: Install uv and Python
|
| 29 |
uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
|
|
|
|
| 33 |
enable-cache: true
|
| 34 |
|
| 35 |
- name: Sync locked dependencies
|
| 36 |
+
run: uv sync --locked --extra dev
|
| 37 |
|
| 38 |
- name: Lint
|
| 39 |
run: uv run --frozen ruff check .
|