nlohmann / json / 42776123213

100%

push

github

ci: install the remaining pip dependencies with --require-hashes (#6050)

Install Semgrep from a new hash-pinned requirements file in
cmake/requirements (covered by Dependabot) instead of a version-only
"pip install semgrep==1.168.0", and pass --require-hashes to the astyle
and natvis installs in check_amalgamation.yml, whose requirements files
got their hashes in #6046. Addresses the Scorecard Pinned-Dependencies
code-scanning alerts for semgrep.yml and check_amalgamation.yml.

Signed-off-by: Niels Lohmann <mail@nlohmann.me>

36386 of 124958 branches covered (29.12%)

17094 of 17145 relevant lines covered (99.7%)

5010744.94 hits per line