-
Notifications
You must be signed in to change notification settings - Fork 50
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore: pin yamllint, golangci-lint #783
Conversation
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
@@ -0,0 +1,67 @@ | |||
# |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
AFAICT this is like a lock file. Should we perhaps use the Pipfile
and Pipfile.lock
formats instead?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
That's right, it is a lock file. I tried pipenv, but you first have to install it into the actions runner. Even actions/setp-python doesn't actually install pipenv. So I think we may as well continue using the requirements.txt.
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
Signed-off-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can’t speak to what’s correct for python dep pinning, but this seems good from what I’ve seen.
pins the yaml-lint and golangci-lint dependency used in pre-submits.
This is to fix code-scanning alerts about unpinned dependencies
Testing Process
The pre-submit test that uses yamllint and golangci-lint passes