25441711719

Committed 06 May 2026 02:31PM UTC coverage: 92.915%. Remained the same

Build # 25441711719

Build Type

push

github

Committed by

web-flow

Commit Message

use sha pin (with comment) format for generated actions (#23312)

Per the GitHub Action best practices we recently enabled at #23249, we
should pin each action to a SHA so that the reference is actually
immutable.

This will -- I hope -- knock out a large chunk of the 421 alerts we
currently get from zizmor. The next followup would then be upgrades and
harmonizing the generated and none-generated pins.

Notice: This idea was suggested by Claude while going over pinact output
and I was surprised to see that post processing the yaml wasn't too
gross.

Coverage Stats

92206 of 99237 relevant lines covered (92.91%)

4.04 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

100.0

/src/python/pants/backend/k8s/k8s_subsystem.py

# Copyright 2024 Pants project contributors (see CONTRIBUTORS.md).
# Licensed under the Apache License, Version 2.0 (see LICENSE).
import logging

from pants.engine.rules import collect_rules
from pants.option.option_types import BoolOption, StrListOption
from pants.option.subsystem import Subsystem
from pants.util.strutil import softwrap

logger = logging.getLogger(__name__)


class K8sSubsystem(Subsystem):
    name = "k8s"
    options_scope = "k8s"
    help = "Kubernetes options"

    available_contexts = StrListOption(
        default=[],
        help=softwrap(
            """
            List of available contexts for `kubectl` command. `k8s_bundle`
            context will be validated against this list.

            You have to explicitly provide the list, because it will be shared
            with people using the pants repo. We can't parse the KUBECONFIG env
            var because different people might have different private clusters,
            e.g. minikube or kind, which means pants validation will give
            different results.
            """
        ),
    )

    tailor_source_targets = BoolOption(
        default=True,
        help=softwrap(
            """
            If true, add `k8s_sources` targets with the `tailor` goal.
            """
        ),
        advanced=True,
    )


def rules():
    return collect_rules()

1	# Copyright 2024 Pants project contributors (see CONTRIBUTORS.md).
2	# Licensed under the Apache License, Version 2.0 (see LICENSE).
3	import logging	1✔
4
5	from pants.engine.rules import collect_rules	1✔
6	from pants.option.option_types import BoolOption, StrListOption	1✔
7	from pants.option.subsystem import Subsystem	1✔
8	from pants.util.strutil import softwrap	1✔
9
10	logger = logging.getLogger(__name__)	1✔
11
12
13	class K8sSubsystem(Subsystem):	1✔
14	name = "k8s"	1✔
15	options_scope = "k8s"	1✔
16	help = "Kubernetes options"	1✔
17
18	available_contexts = StrListOption(	1✔
19	default=[],
20	help=softwrap(
21	"""
22	List of available contexts for `kubectl` command. `k8s_bundle`
23	context will be validated against this list.
24
25	You have to explicitly provide the list, because it will be shared
26	with people using the pants repo. We can't parse the KUBECONFIG env
27	var because different people might have different private clusters,
28	e.g. minikube or kind, which means pants validation will give
29	different results.
30	"""
31	),
32	)
33
34	tailor_source_targets = BoolOption(	1✔
35	default=True,
36	help=softwrap(
37	"""
38	If true, add `k8s_sources` targets with the `tailor` goal.
39	"""
40	),
41	advanced=True,
42	)
43
44
45	def rules():	1✔
46	return collect_rules()	1✔

pantsbuild / pants / 25441711719

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous