diff --git a/.github/workflows/regression_template.yml b/.github/workflows/regression_template.yml index 5e2929215..f2b529f6e 100644 --- a/.github/workflows/regression_template.yml +++ b/.github/workflows/regression_template.yml @@ -63,7 +63,7 @@ jobs: # Steps represent a sequence of tasks that will be executed as part of the job steps: - name: Check out the repository - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: submodules: true @@ -86,7 +86,7 @@ jobs: - name: Upload Test Results if: success() || failure() - uses: actions/upload-artifact@v4.6.0 + uses: actions/upload-artifact@v4.6.2 with: name: test_reports ${{ inputs.result_affix }} path: | @@ -95,7 +95,7 @@ jobs: ${{ inputs.cmake_path }}/build/**/regression/output_files/*.bin - name: Configure GitHub Pages - uses: actions/configure-pages@v3.0.6 + uses: actions/configure-pages@v5.0.0 - name: Generate Code Coverage Results Summary if: (!inputs.skip_coverage) @@ -115,7 +115,7 @@ jobs: - name: Create CheckRun for Code Coverage if: ((github.event_name == 'push') || (github.event_name == 'workflow_dispatch') || (github.event.pull_request.head.repo.full_name == github.repository)) && (!inputs.skip_coverage) - uses: LouisBrunner/checks-action@v1.6.2 + uses: LouisBrunner/checks-action@v2.0.0 with: token: ${{ secrets.GITHUB_TOKEN }} name: Code Coverage ${{ inputs.result_affix }} @@ -126,7 +126,7 @@ jobs: - name: Add Code Coverage PR Comment if: ((github.event_name == 'push') || (github.event.pull_request.head.repo.full_name == github.repository)) && (!inputs.skip_coverage) - uses: marocchino/sticky-pull-request-comment@v2 + uses: marocchino/sticky-pull-request-comment@v2.9.4 with: header: Code Coverage ${{ inputs.result_affix }} path: code-coverage-results.md @@ -139,17 +139,22 @@ jobs: sudo mv ${{ inputs.cmake_path }}/coverage_report/${{ inputs.coverage_name }} \ ${{ inputs.cmake_path }}/coverage_report/${{ inputs.result_affix }} fi - + + - name: Coverage Report name + id: artifact + if: (!inputs.skip_coverage) + run: echo "coverage_report=coverage_report-$(date +%s)" >> $GITHUB_OUTPUT + - name: Upload Code Coverage Artifacts - uses: actions/upload-artifact@v4.6.0 + uses: actions/upload-artifact@v4.6.2 if: (inputs.skip_deploy && !inputs.skip_coverage) with: - name: coverage_report - path: ${{ inputs.cmake_path }}/coverage_report - retention-days: 1 - + name: ${{ steps.artifact.outputs.coverage_report }} + path: ${{ inputs.cmake_path }}/coverage_report + retention-days: 1 + - name: Upload Code Coverage Pages - uses: actions/upload-pages-artifact@v2.0.0 + uses: actions/upload-pages-artifact@v3.0.1 if: (!inputs.skip_deploy && !inputs.skip_coverage) with: path: ${{ inputs.cmake_path }}/coverage_report/${{ inputs.coverage_name }} @@ -166,25 +171,26 @@ jobs: id-token: write steps: - - uses: actions/download-artifact@v4.1.7 + - uses: actions/download-artifact@v4.3.0 if: ${{ inputs.skip_test }} with: - name: coverage_report + name: ${{ steps.artifact.outputs.coverage_report }} + path: ${{ inputs.cmake_path }}/coverage_report - name: Upload Code Coverage Pages - uses: actions/upload-pages-artifact@v2.0.0 + uses: actions/upload-pages-artifact@v3.0.1 if: ${{ inputs.skip_test }} with: path: . - name: Delete Duplicate Code Coverage Artifact - uses: geekyeggo/delete-artifact@v2 + uses: geekyeggo/delete-artifact@v5.1.0 with: name: coverage_report - name: Deploy GitHub Pages site id: deployment - uses: actions/deploy-pages@v1.2.9 + uses: actions/deploy-pages@v4.0.5 - name: Write Code Coverage Report URL run: >- diff --git a/.github/workflows/regression_test.yml b/.github/workflows/regression_test.yml index 636f089c4..c55a2c56e 100644 --- a/.github/workflows/regression_test.yml +++ b/.github/workflows/regression_test.yml @@ -12,6 +12,13 @@ on: # A workflow run is made up of one or more jobs that can run sequentially or in parallel jobs: tx: + permissions: + contents: read + issues: read + checks: write + pull-requests: write + pages: write + id-token: write uses: ./.github/workflows/regression_template.yml with: build_script: ./scripts/build_tx.sh @@ -20,6 +27,13 @@ jobs: result_affix: ThreadX skip_deploy: true smp: + permissions: + contents: read + issues: read + checks: write + pull-requests: write + pages: write + id-token: write uses: ./.github/workflows/regression_template.yml with: build_script: ./scripts/build_smp.sh @@ -28,6 +42,13 @@ jobs: result_affix: SMP skip_deploy: true deploy: + permissions: + contents: read + issues: read + checks: write + pull-requests: write + pages: write + id-token: write needs: [tx, smp] uses: ./.github/workflows/regression_template.yml with: