-
Notifications
You must be signed in to change notification settings - Fork 2
Description
Issue is that actions/setup-python@v4
is in use when actions-setup-python@v5
(circa v5.1.1) is available to use.
See also Issue #40 for related flaw in test.
Logs (If Available):
-
see https://github.com/reactive-firewall/python-repo/actions/runs/9914878768/workflow
-
and see also:
python-repo/.github/workflows/Tests.yml
Lines 42 to 44 in 227f210
- uses: actions/setup-python@v4 with: python-version: "3.12" -
and see also:
python-repo/.github/workflows/Tests.yml
Lines 101 to 104 in 227f210
- name: Setup Python uses: actions/setup-python@v4 with: python-version: ${{ matrix.python-version }} -
and see also:
python-repo/.github/workflows/Tests.yml
Lines 159 to 162 in 227f210
- name: Setup Python ${{ matrix.python-version }} uses: actions/setup-python@v4 with: python-version: ${{ matrix.python-version }} -
and see also:
python-repo/.github/workflows/Tests.yml
Lines 206 to 209 in 227f210
- name: Setup Python ${{ matrix.python-version }} uses: actions/setup-python@v4 with: python-version: ${{ matrix.python-version }} -
and see also:
python-repo/.github/workflows/Tests.yml
Lines 206 to 209 in 227f210
- name: Setup Python ${{ matrix.python-version }} uses: actions/setup-python@v4 with: python-version: ${{ matrix.python-version }} -
and see also:
python-repo/.github/workflows/Tests.yml
Lines 290 to 293 in 227f210
- name: Setup Python ${{ matrix.python-version }} uses: actions/setup-python@v4 with: python-version: ${{ matrix.python-version }} -
and see also:
python-repo/.github/workflows/Tests.yml
Lines 365 to 368 in 227f210
- name: Setup Python uses: actions/setup-python@v4 with: python-version: "3.10" -
and see also:
python-repo/.github/workflows/Tests.yml
Lines 411 to 414 in 227f210
- name: Setup Python ${{ matrix.python-version }} uses: actions/setup-python@v4 with: python-version: ${{ matrix.python-version }} -
and see also:
python-repo/.github/workflows/Tests.yml
Lines 485 to 488 in 227f210
- name: Setup Python uses: actions/setup-python@v4 with: python-version: "3.10"
Additional Information:
Unlike the suggestion from the naive actions/scorecard
recommendation of using only the hash, the tag v5
is code-signed (see https://github.com/actions/setup-python/releases/tag/v5.0.0 and https://github.com/actions/setup-python/releases/tag/v5.1.1 for more) and acceptable for use with this project instead of the less maintainable hash (as git treats the hash and tag ref with the same indifference when resolving them to a matching git blob).