25441711719

Committed 06 May 2026 02:31PM UTC coverage: 92.915%. Remained the same

Build # 25441711719

Build Type

push

github

Committed by

web-flow

Commit Message

use sha pin (with comment) format for generated actions (#23312)

Per the GitHub Action best practices we recently enabled at #23249, we
should pin each action to a SHA so that the reference is actually
immutable.

This will -- I hope -- knock out a large chunk of the 421 alerts we
currently get from zizmor. The next followup would then be upgrades and
harmonizing the generated and none-generated pins.

Notice: This idea was suggested by Claude while going over pinact output
and I was surprised to see that post processing the yaml wasn't too
gross.

Coverage Stats

92206 of 99237 relevant lines covered (92.91%)

4.04 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

100.0

/src/python/pants/backend/python/subsystems/setuptools_scm.py

# Copyright 2022 Pants project contributors (see CONTRIBUTORS.md).
# Licensed under the Apache License, Version 2.0 (see LICENSE).

from pants.backend.python.subsystems.python_tool_base import PythonToolBase
from pants.backend.python.target_types import EntryPoint
from pants.core.goals.resolves import ExportableTool
from pants.engine.rules import collect_rules
from pants.engine.unions import UnionRule

# pants: infer-dep(setuptools_scm.lock*)


class SetuptoolsSCM(PythonToolBase):
    options_scope = "setuptools-scm"
    help_short = (
        "A tool for generating versions from VCS metadata (https://github.com/pypa/setuptools_scm)."
    )

    default_main = EntryPoint("setuptools_scm")
    default_requirements = ["setuptools-scm>=6.4.2,<8"]

    register_interpreter_constraints = True

    default_lockfile_resource = ("pants.backend.python.subsystems", "setuptools_scm.lock")


def rules():
    return [
        *collect_rules(),
        UnionRule(ExportableTool, SetuptoolsSCM),
    ]

1	# Copyright 2022 Pants project contributors (see CONTRIBUTORS.md).
2	# Licensed under the Apache License, Version 2.0 (see LICENSE).
3
4	from pants.backend.python.subsystems.python_tool_base import PythonToolBase	1✔
5	from pants.backend.python.target_types import EntryPoint	1✔
6	from pants.core.goals.resolves import ExportableTool	1✔
7	from pants.engine.rules import collect_rules	1✔
8	from pants.engine.unions import UnionRule	1✔
9
10	# pants: infer-dep(setuptools_scm.lock*)
11
12
13	class SetuptoolsSCM(PythonToolBase):	1✔
14	options_scope = "setuptools-scm"	1✔
15	help_short = (	1✔
16	"A tool for generating versions from VCS metadata (https://github.com/pypa/setuptools_scm)."
17	)
18
19	default_main = EntryPoint("setuptools_scm")	1✔
20	default_requirements = ["setuptools-scm>=6.4.2,<8"]	1✔
21
22	register_interpreter_constraints = True	1✔
23
24	default_lockfile_resource = ("pants.backend.python.subsystems", "setuptools_scm.lock")	1✔
25
26
27	def rules():	1✔
28	return [	1✔
29	*collect_rules(),
30	UnionRule(ExportableTool, SetuptoolsSCM),
31	]

pantsbuild / pants / 25441711719

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous