fetch-depth: 5
submodules: recursive
ref: ${{ inputs.branch-name }}
+ persist-credentials: false
- name: get timestamp for cache
id: get-stamp
run: |
fetch-depth: 5
submodules: recursive
ref: ${{ inputs.branch-name }}
+ persist-credentials: false
- name: get timestamp for cache
id: get-stamp
run: |
fetch-depth: 5
submodules: recursive
ref: ${{ inputs.branch-name }}
+ persist-credentials: false
- name: get timestamp for cache
id: get-stamp
run: |
fetch-depth: 5
submodules: recursive
ref: ${{ inputs.branch-name }}
+ persist-credentials: false
- run: echo "normalized-branch-name=${{ inputs.branch-name || github.ref_name }}" | tr "/" "-" >> "$GITHUB_ENV"
- name: Fetch the binaries
uses: actions/download-artifact@v4
fetch-depth: 5
submodules: recursive
ref: ${{ inputs.branch-name }}
+ persist-credentials: false
- run: echo "normalized-branch-name=${{ inputs.branch-name || github.ref_name }}" | tr "/" "-" >> "$GITHUB_ENV"
- name: Fetch the binaries
uses: actions/download-artifact@v4
fetch-depth: 5
submodules: recursive
ref: ${{ inputs.branch-name }}
+ persist-credentials: false
- run: echo "normalized-branch-name=${{ inputs.branch-name || github.ref_name }}" | tr "/" "-" >> "$GITHUB_ENV"
- name: Fetch the binaries
uses: actions/download-artifact@v4
fetch-depth: 5
submodules: recursive
ref: ${{ inputs.branch-name }}
+ persist-credentials: false
- run: echo "normalized-branch-name=${{ inputs.branch-name || github.ref_name }}" | tr "/" "-" >> "$GITHUB_ENV"
- name: Fetch the binaries
uses: actions/download-artifact@v4
fetch-depth: 5
submodules: recursive
ref: ${{ inputs.branch-name }}
+ persist-credentials: false
- run: echo "normalized-branch-name=${{ inputs.branch-name || github.ref_name }}" | tr "/" "-" >> "$GITHUB_ENV"
- name: Fetch the binaries
uses: actions/download-artifact@v4
fetch-depth: 5
submodules: recursive
ref: ${{ inputs.branch-name }}
+ persist-credentials: false
- run: echo "normalized-branch-name=${{ inputs.branch-name || github.ref_name }}" | tr "/" "-" >> "$GITHUB_ENV"
- name: Fetch the binaries
uses: actions/download-artifact@v4
fetch-depth: 5
submodules: recursive
ref: ${{ inputs.branch-name }}
+ persist-credentials: false
- run: echo "normalized-branch-name=${{ inputs.branch-name || github.ref_name }}" | tr "/" "-" >> "$GITHUB_ENV"
- name: Fetch the binaries
uses: actions/download-artifact@v4
fetch-depth: 5
submodules: recursive
ref: ${{ inputs.branch-name }}
+ persist-credentials: false
- run: echo "normalized-branch-name=${{ inputs.branch-name || github.ref_name }}" | tr "/" "-" >> "$GITHUB_ENV"
- name: Fetch the binaries
uses: actions/download-artifact@v4
fetch-depth: 5
submodules: recursive
ref: ${{ inputs.branch-name }}
+ persist-credentials: false
- name: install pip build dependencies
run: |
python3 -m venv ${REPO_HOME}/.venv
fetch-depth: 5
submodules: recursive
ref: ${{ inputs.branch-name }}
+ persist-credentials: false
- name: Get list of jobs in the workflow
run: "cat .github/workflows/build-and-test-all.yml | jc --yaml | jq -rS '.[].jobs | keys | .[]' | grep -vE 'collect|get-runner-container-image' | tee /tmp/workflow-jobs-list.yml"
- name: Get list of prerequisite jobs
fetch-depth: 0
submodules: recursive
ref: ${{ inputs.ref }}
+ persist-credentials: false
- name: validate reference only if image will be pushed
if: ${{ inputs.push }}
run: |
fetch-depth: 0
submodules: recursive
ref: ${{ inputs.ref }}
+ persist-credentials: false
- name: Set up QEMU
uses: docker/setup-qemu-action@v3
with:
fetch-depth: 1
submodules: recursive
ref: ${{ inputs.ref }}
+ persist-credentials: false
- id: get-oslist
run: |
available_targets=$(ls builder-support/dockerfiles/Dockerfile.target.* )
fetch-depth: 0 # for correct version numbers
submodules: recursive
ref: ${{ inputs.ref }}
+ persist-credentials: false
# this builds packages and runs our unit tests (make check)
- run: IS_RELEASE=${{ inputs.is_release}} builder/build.sh -v -m ${{ inputs.product }} ${{ matrix.os }}
- name: Get version number
fetch-depth: 0 # for correct version numbers
submodules: recursive
ref: ${{ inputs.branch-name }}
+ persist-credentials: false
# this builds packages and runs our unit test (make check)
- run: builder/build.sh -v -m ${{ matrix.product }} ${{ matrix.os }}
- name: Get version number
# We must fetch at least the immediate parents so that if this is
# a pull request then we can checkout the head.
fetch-depth: 2
+ persist-credentials: false
- uses: actions/setup-python@v5
with:
python-version: '3.11'
uses: actions/checkout@v4
with:
fetch-depth: 2
+ persist-credentials: false
- run: if [[ "$(file -i --dereference $(git diff --name-only HEAD^..HEAD -- . :^fuzzing/corpus) | grep binary | grep -v 'image/' | grep -v 'inode/x-empty' | grep -v 'inode/directory' | grep -v '^modules/lmdbbackend/test-assets/' | grep -v '^website/docs.powerdns.com/website/fonts/' | grep -v '^website/docs.powerdns.com/website/img/' | grep -v '^modules/tinydnsbackend/data.cdb' | tee /dev/stderr)" != "" ]]; then exit 1; fi
with:
fetch-depth: 5
submodules: recursive
+ persist-credentials: false
- uses: actions/setup-python@v5
with:
python-version: '3.11'
with:
fetch-depth: 5
submodules: recursive
+ persist-credentials: false
- uses: actions/setup-python@v5
with:
python-version: '3.11'
with:
fetch-depth: 5
submodules: recursive
+ persist-credentials: false
- uses: actions/setup-python@v5
with:
python-version: '3.11'
steps:
- uses: PowerDNS/pdns/set-ubuntu-mirror@meta
- uses: actions/checkout@v4
+ with:
+ persist-credentials: false
- uses: actions/setup-python@v5
with:
python-version: '3.11'
fi
- uses: PowerDNS/pdns/set-ubuntu-mirror@meta
- uses: actions/checkout@v4
+ with:
+ persist-credentials: false
- run: build-scripts/gh-actions-setup-inv-no-dist-upgrade
- uses: actions/download-artifact@v4
with:
exit 1
fi
- uses: actions/checkout@v4
+ with:
+ persist-credentials: false
- uses: aws-actions/configure-aws-credentials@v4
with:
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
with:
fetch-depth: 5
submodules: recursive
+ persist-credentials: false
- name: Update dependencies
run: |
sudo apt-get update
with:
fetch-depth: 5
submodules: recursive
+ persist-credentials: false
- run: docker build -t gcr.io/oss-fuzz-base/base-builder:latest -f Dockerfile-cifuzz .
- name: Build Fuzzers
uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master
with:
fetch-depth: 5
submodules: recursive
+ persist-credentials: false
- name: Check if Debian is about to toss us off a balcony
run: ./build-scripts/check-debian-autoremovals.py
req-files: ${{ steps.get-list-requirements.outputs.files }}
steps:
- uses: actions/checkout@v4
+ with:
+ persist-credentials: false
- name: Get all requirements.txt files and export them as outputs
id: get-list-requirements
run: |
- run: echo "${{ matrix.requirements-file }}"
- uses: PowerDNS/pdns/set-ubuntu-mirror@meta
- uses: actions/checkout@v4
+ with:
+ persist-credentials: false
- uses: actions/setup-python@v5
with:
python-version: '3.11'
fetch-depth: 5
submodules: recursive
ref: ${{ inputs.branch-name }}
+ persist-credentials: false
- name: Add PowerDNS Repo
run: echo 'deb [signed-by=/etc/apt/keyrings/rec-master-pub.asc] http://repo.powerdns.com/ubuntu noble-rec-master main' | sudo tee /etc/apt/sources.list.d/pdns.list
- name: Add key
with:
fetch-depth: 5
submodules: recursive
+ persist-credentials: false
- run: sh docs/secpoll-check.sh docs/secpoll.zone
- run: echo 'deb [arch=amd64] http://repo.powerdns.com/ubuntu noble-auth-master main' | sudo tee /etc/apt/sources.list.d/pdns.list
- run: "echo -ne 'Package: pdns-*\nPin: origin repo.powerdns.com\nPin-Priority: 600\n' | sudo tee /etc/apt/preferences.d/pdns"
projects / thirdparty / pdns.git / commitdiff
