25441711719

Committed 06 May 2026 02:31PM UTC coverage: 92.915%. Remained the same

Build # 25441711719

Build Type

push

github

Committed by

web-flow

Commit Message

use sha pin (with comment) format for generated actions (#23312)

Per the GitHub Action best practices we recently enabled at #23249, we
should pin each action to a SHA so that the reference is actually
immutable.

This will -- I hope -- knock out a large chunk of the 421 alerts we
currently get from zizmor. The next followup would then be upgrades and
harmonizing the generated and none-generated pins.

Notice: This idea was suggested by Claude while going over pinact output
and I was surprised to see that post processing the yaml wasn't too
gross.

Coverage Stats

92206 of 99237 relevant lines covered (92.91%)

4.04 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

95.24

/src/python/pants/backend/go/util_rules/link_defs.py

# Copyright 2023 Pants project contributors (see CONTRIBUTORS.md).
# Licensed under the Apache License, Version 2.0 (see LICENSE).
from __future__ import annotations

from dataclasses import dataclass

from pants.backend.go.util_rules.build_opts import GoBuildOptions
from pants.engine.environment import EnvironmentName
from pants.engine.internals.native_engine import Digest
from pants.engine.rules import collect_rules, rule
from pants.engine.unions import union
from pants.util.frozendict import FrozenDict


@union(in_scope_types=[EnvironmentName])
@dataclass(frozen=True)
class ImplicitLinkerDependenciesHook:
    build_opts: GoBuildOptions


@dataclass(frozen=True)
class ImplicitLinkerDependencies:
    digest: Digest
    import_paths_to_pkg_a_files: FrozenDict[str, str]


@rule(polymorphic=True)
async def get_implicit_linker_dependencies(
    req: ImplicitLinkerDependenciesHook, env_name: EnvironmentName
) -> ImplicitLinkerDependencies:
    raise NotImplementedError()


def rules():
    return collect_rules()

1	# Copyright 2023 Pants project contributors (see CONTRIBUTORS.md).
2	# Licensed under the Apache License, Version 2.0 (see LICENSE).
3	from __future__ import annotations	11✔
4
5	from dataclasses import dataclass	11✔
6
7	from pants.backend.go.util_rules.build_opts import GoBuildOptions	11✔
8	from pants.engine.environment import EnvironmentName	11✔
9	from pants.engine.internals.native_engine import Digest	11✔
10	from pants.engine.rules import collect_rules, rule	11✔
11	from pants.engine.unions import union	11✔
12	from pants.util.frozendict import FrozenDict	11✔
13
14
15	@union(in_scope_types=[EnvironmentName])	11✔
16	@dataclass(frozen=True)	11✔
17	class ImplicitLinkerDependenciesHook:	11✔
18	build_opts: GoBuildOptions	11✔
19
20
21	@dataclass(frozen=True)	11✔
22	class ImplicitLinkerDependencies:	11✔
23	digest: Digest	11✔
24	import_paths_to_pkg_a_files: FrozenDict[str, str]	11✔
25
26
27	@rule(polymorphic=True)	11✔
28	async def get_implicit_linker_dependencies(	11✔
29	req: ImplicitLinkerDependenciesHook, env_name: EnvironmentName
30	) -> ImplicitLinkerDependencies:
31	raise NotImplementedError()	×
32
33
34	def rules():	11✔
35	return collect_rules()	1✔

pantsbuild / pants / 25441711719

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous