12320359725
92%

Ran 13 Dec 2024 05:42PM UTC

Jobs 8

Files 72

Run time 1min

Badge

Embed ▾

Committed 13 Dec 2024 05:37PM UTC coverage: 89.765%. Remained the same

Build # 12320359725

Build Type

push

github

Committed by

web-flow

Commit Message

Workflow security fixes (#2023)

### What kind of change does this PR introduce?

* De-escalates the privileges of steps in workflows by restricting
credentials
* Reduces the risk of template injection in `run` steps
* Simplifies the `bump-my-version` logic

### Does this PR introduce a breaking change?

It should not.

### Other information:

Changes suggested here were determined from analysis using
https://github.com/woodruffw/zizmor

Run Details

9437 of 10513 relevant lines covered (89.77%)

7.6 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	run-{{ matrix.python-version }}-conda - 12320359725.1	13 Dec 2024 05:50PM UTC	72	87.91	GitHub Action Run
2	run-3.10-windows-latest-py310-coverage-prefetch - 12320359725.2	13 Dec 2024 05:50PM UTC	72	81.9	GitHub Action Run
3	run-3.11-ubuntu-latest-py311-coverage-sbck-offline-prefetch - 12320359725.3	13 Dec 2024 05:50PM UTC	72	83.93	GitHub Action Run
4	run-3.11-ubuntu-latest-standard - 12320359725.4	13 Dec 2024 05:50PM UTC	72	83.99	GitHub Action Run
5	run-3.11-macos-latest-py311-coverage-extras - 12320359725.5	13 Dec 2024 05:50PM UTC	72	87.88	GitHub Action Run
6	run-3.12-ubuntu-latest-standard - 12320359725.6	13 Dec 2024 05:50PM UTC	72	82.44	GitHub Action Run
7	run-3.10-ubuntu-latest-standard - 12320359725.7	13 Dec 2024 05:50PM UTC	72	82.09	GitHub Action Run
8	run-3.10-ubuntu-latest-preliminary - 12320359725.8	13 Dec 2024 05:50PM UTC	72	82.09	GitHub Action Run

Ouranosinc / xclim / 12320359725
92%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 12320359725

Ouranosinc / xclim / 12320359725 92%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 12320359725

Ouranosinc / xclim / 12320359725
92%

README BADGES
x