From d710acbed51b0a01cd1d2297bf87f7497c662fca Mon Sep 17 00:00:00 2001 From: akallabeth Date: Sat, 10 Feb 2024 10:51:53 +0100 Subject: [PATCH] [ci,tidy] run on pull request * add required permission --- .github/workflows/clang-tidy.yml | 4 ++++ .github/workflows/codeql-analysis.yml | 7 +++++-- .github/workflows/fuzzing.yml | 6 ++++++ 3 files changed, 15 insertions(+), 2 deletions(-) diff --git a/.github/workflows/clang-tidy.yml b/.github/workflows/clang-tidy.yml index 7ca3b1a43..939312e81 100644 --- a/.github/workflows/clang-tidy.yml +++ b/.github/workflows/clang-tidy.yml @@ -8,7 +8,11 @@ jobs: runs-on: ubuntu-latest steps: + - uses: suzuki-shunsuke/get-pr-action@v0.1.0 + id: pr - uses: actions/checkout@v4 + with: + ref: ${{fromJSON(steps.pr.outputs.result).merge_commit_sha}} # Run clang-tidy - uses: ZedThree/clang-tidy-review@v0.17.1 diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 1b5842b62..d9e3587ae 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -36,8 +36,11 @@ jobs: # https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed steps: - - name: Checkout repository - uses: actions/checkout@v2 + - uses: suzuki-shunsuke/get-pr-action@v0.1.0 + id: pr + - uses: actions/checkout@v4 + with: + ref: ${{fromJSON(steps.pr.outputs.result).merge_commit_sha}} # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL diff --git a/.github/workflows/fuzzing.yml b/.github/workflows/fuzzing.yml index e86c61674..11a4e0234 100644 --- a/.github/workflows/fuzzing.yml +++ b/.github/workflows/fuzzing.yml @@ -18,6 +18,12 @@ jobs: sanitizer: [address] steps: + - uses: suzuki-shunsuke/get-pr-action@v0.1.0 + id: pr + - uses: actions/checkout@v4 + with: + ref: ${{fromJSON(steps.pr.outputs.result).merge_commit_sha}} + - name: Build fuzzers (${{ matrix.sanitizer }}) id: build uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master