25441711719

Committed 06 May 2026 02:31PM UTC coverage: 92.915%. Remained the same

Build # 25441711719

Build Type

push

github

Committed by

web-flow

Commit Message

use sha pin (with comment) format for generated actions (#23312)

Per the GitHub Action best practices we recently enabled at #23249, we
should pin each action to a SHA so that the reference is actually
immutable.

This will -- I hope -- knock out a large chunk of the 421 alerts we
currently get from zizmor. The next followup would then be upgrades and
harmonizing the generated and none-generated pins.

Notice: This idea was suggested by Claude while going over pinact output
and I was surprised to see that post processing the yaml wasn't too
gross.

Coverage Stats

92206 of 99237 relevant lines covered (92.91%)

4.04 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

83.33

/src/python/pants/bsp/utils.py

# Copyright 2022 Pants project contributors (see CONTRIBUTORS.md).
# Licensed under the Apache License, Version 2.0 (see LICENSE).

from __future__ import annotations

from typing import Any

from pants.util.frozendict import FrozenDict


def freeze_json(item: Any) -> Any:
    if item is None:
        return None
    elif isinstance(item, list) or isinstance(item, tuple):
        return tuple(freeze_json(x) for x in item)
    elif isinstance(item, dict):
        result = {}
        for k, v in item.items():
            if not isinstance(k, str):
                raise AssertionError("Got non-`str` key for _freeze.")
            result[k] = freeze_json(v)
        return FrozenDict(result)
    elif isinstance(item, str) or isinstance(item, int) or isinstance(item, float):
        return item
    else:
        raise AssertionError(f"Unsupported value type for _freeze: {type(item)}")

1	# Copyright 2022 Pants project contributors (see CONTRIBUTORS.md).
2	# Licensed under the Apache License, Version 2.0 (see LICENSE).
3
4	from __future__ import annotations	2✔
5
6	from typing import Any	2✔
7
8	from pants.util.frozendict import FrozenDict	2✔
9
10
11	def freeze_json(item: Any) -> Any:	2✔
12	if item is None:	1✔
13	return None	×
14	elif isinstance(item, list) or isinstance(item, tuple):	1✔
15	return tuple(freeze_json(x) for x in item)	1✔
16	elif isinstance(item, dict):	1✔
17	result = {}	1✔
18	for k, v in item.items():	1✔
19	if not isinstance(k, str):	1✔
20	raise AssertionError("Got non-`str` key for _freeze.")	×
21	result[k] = freeze_json(v)	1✔
22	return FrozenDict(result)	1✔
23	elif isinstance(item, str) or isinstance(item, int) or isinstance(item, float):	1✔
24	return item	1✔
25	else:
26	raise AssertionError(f"Unsupported value type for _freeze: {type(item)}")	×

pantsbuild / pants / 25441711719

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous