9998623444
92%

Ran 18 Jul 2024 09:08PM UTC

Jobs 2

Files 70

Run time 1min

Badge

Embed ▾

Committed 18 Jul 2024 09:03PM UTC coverage: 90.658%. Remained the same

Build # 9998623444

Build Type

push

github

Committed by

web-flow

Commit Message

Use hashed dependencies and fix workflow permissions (#1841)

### What kind of change does this PR introduce?

* Addresses several security issues pertaining to workflow permissions
* Simplifies the build triggers in `main.yml`
* Python3.9 preliminary test is now always run when tests are triggered
* `pip-tools` (`pip-compile`) has been run to generate the hashes now
found in `CI/requirements_ci.txt`
* A workflow bug that causes forked Pull Requests to receive duplicated
comments should now be fixed

### Does this PR introduce a breaking change?

No.

### Other information:

* What is `pip-tools`?
[Documentation](https://pip-tools.readthedocs.io/en/latest/)
This tool is used to determine the acceptable sha256 hashes for all
dependencies (and sub-dependencies) listed in `CI/requirements.in`.
Think of this as something similar to `pip freeze` or `conda lock` in
its utility. Implementing this approach should resolve several security
warnings for potential man-in-the-middle attacks.

These hashes should be managed automatically by @dependabot.

Run Details

8831 of 9741 relevant lines covered (90.66%)

5.82 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	run-{{ matrix.tox-env }}-{{ matrix.os }} - 9998623444.1	18 Jul 2024 09:14PM UTC	0	90.62	GitHub Action Run
2	run-{{ matrix.tox-env }}-opt-slow - 9998623444.2	18 Jul 2024 09:14PM UTC	0	89.71	GitHub Action Run

Source Files on build 9998623444

Detailed source file information is not available for this build.

Ouranosinc / xclim / 9998623444
92%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 9998623444

Ouranosinc / xclim / 9998623444 92%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 9998623444

Ouranosinc / xclim / 9998623444
92%

README BADGES
x