mirror of
				https://github.com/YosysHQ/yosys
				synced 2025-11-03 21:09:12 +00:00 
			
		
		
		
	> A static analysis tool for Github Actions https://github.com/woodruffw/zizmor Mostly means adding `persist-credentials: false` to checkouts and replacing `{{ env.VARNAME }}` with shell substitution.
		
			
				
	
	
		
			34 lines
		
	
	
	
		
			1 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
			
		
		
	
	
			34 lines
		
	
	
	
		
			1 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
name: Create source archive with vendored dependencies
 | 
						|
 | 
						|
on: [push, workflow_dispatch]
 | 
						|
 | 
						|
jobs:
 | 
						|
  vendor-sources:
 | 
						|
    runs-on: ubuntu-latest
 | 
						|
    steps:
 | 
						|
      - name: Checkout repository with submodules
 | 
						|
        uses: actions/checkout@v4
 | 
						|
        with:
 | 
						|
          submodules: 'recursive'
 | 
						|
          persist-credentials: false
 | 
						|
 | 
						|
      - name: Create clean tarball
 | 
						|
        run: |
 | 
						|
          git archive --format=tar HEAD -o yosys-src-vendored.tar
 | 
						|
          git submodule foreach '
 | 
						|
            git archive --format=tar --prefix="${sm_path}/" HEAD --output=${toplevel}/vendor-${name}.tar
 | 
						|
          '
 | 
						|
 | 
						|
          # 2008 bug https://lists.gnu.org/archive/html/bug-tar/2008-08/msg00002.html
 | 
						|
          for file in vendor-*.tar; do
 | 
						|
              tar --concatenate --file=yosys-src-vendored.tar "$file"
 | 
						|
          done
 | 
						|
 | 
						|
          gzip yosys-src-vendored.tar
 | 
						|
 | 
						|
      - name: Store tarball artifact
 | 
						|
        uses: actions/upload-artifact@v4
 | 
						|
        with:
 | 
						|
          name: vendored-sources
 | 
						|
          path: yosys-src-vendored.tar.gz
 | 
						|
          retention-days: 1
 |