1
92%
main: 92%

Ran 18 Jul 2024 09:14PM UTC

Files 70

Run time 2s

Badge

Embed ▾

Committed 18 Jul 2024 09:03PM UTC coverage: 90.617% (+0.01%) from 90.607%

Job # 9998623444.1

Build Type

push

github

Committed by

web-flow

Commit Message

Use hashed dependencies and fix workflow permissions (#1841)

### What kind of change does this PR introduce?

* Addresses several security issues pertaining to workflow permissions
* Simplifies the build triggers in `main.yml`
* Python3.9 preliminary test is now always run when tests are triggered
* `pip-tools` (`pip-compile`) has been run to generate the hashes now
found in `CI/requirements_ci.txt`
* A workflow bug that causes forked Pull Requests to receive duplicated
comments should now be fixed

### Does this PR introduce a breaking change?

No.

### Other information:

* What is `pip-tools`?
[Documentation](https://pip-tools.readthedocs.io/en/latest/)
This tool is used to determine the acceptable sha256 hashes for all
dependencies (and sub-dependencies) listed in `CI/requirements.in`.
Think of this as something similar to `pip freeze` or `conda lock` in
its utility. Implementing this approach should resolve several security
warnings for potential man-in-the-middle attacks.

These hashes should be managed automatically by @dependabot.

Run Details

8827 of 9741 relevant lines covered (90.62%)

4.03 hits per line

Ouranosinc / xclim / 9998623444 / 1
92%
main: 92%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job run-{{ matrix.tox-env }}-{{ matrix.os }} - 9998623444.1

Ouranosinc / xclim / 9998623444 / 1 92% main: 92%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job run-{{ matrix.tox-env }}-{{ matrix.os }} - 9998623444.1

Ouranosinc / xclim / 9998623444 / 1
92%
main: 92%

README BADGES
x