Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions .github/workflows/main.yml
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@
workflow_dispatch:

jobs:
build:

Check warning on line 26 in .github/workflows/main.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

main.yml:26: overly broad permissions: default permissions used due to no permissions: block
name: Update Discovery Artifacts PR
runs-on: ubuntu-latest
if: ${{github.repository == 'googleapis/google-api-python-client'}}
Expand All @@ -40,7 +40,7 @@
GITHUB_TOKEN: ${{ secrets.YOSHI_CODE_BOT_TOKEN }}

- name: Check out main branch
uses: actions/checkout@v4
uses: actions/checkout@v7

Check failure on line 43 in .github/workflows/main.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 43 in .github/workflows/main.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

main.yml:43: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
ref: refs/heads/main
repository: 'yoshi-code-bot/google-api-python-client'
Expand All @@ -48,12 +48,12 @@

- name: Create branch
run: |
git checkout -b update-discovery-artifacts-${{ steps.date.outputs.current_date }}

Check failure on line 51 in .github/workflows/main.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/template-injection

code injection via template expansion: may expand into attacker-controllable code

- name: Set up Python 3.9
uses: actions/setup-python@v5
uses: actions/setup-python@v7

Check failure on line 54 in .github/workflows/main.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 54 in .github/workflows/main.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

main.yml:54: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
python-version: 3.9
python-version: 3.14

- name: Install google-api-python-client
run: pip3 install -e .
Expand All @@ -78,7 +78,7 @@
working-directory: ./scripts

- name: Push changes
run: git push -u origin update-discovery-artifacts-${{ steps.date.outputs.current_date }}

Check failure on line 81 in .github/workflows/main.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/template-injection

code injection via template expansion: may expand into attacker-controllable code

- name: Prepare summary for PR Body
id: pr_body
Expand All @@ -97,4 +97,4 @@
GITHUB_TOKEN: ${{ secrets.YOSHI_CODE_BOT_TOKEN }}
PR_TITLE: "chore: Update discovery artifacts"
run: |
gh pr create -R "googleapis/google-api-python-client" -B "main" --title "$PR_TITLE" --body "${{ steps.pr_body.outputs.change_summary }}"

Check failure on line 100 in .github/workflows/main.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/template-injection

code injection via template expansion: may expand into attacker-controllable code
6 changes: 3 additions & 3 deletions samples/compute/requirements.txt
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
google-api-python-client==2.134.0
google-auth==2.30.0
google-auth-httplib2==0.2.0
google-api-python-client==2.198.0
google-auth==2.56.2
google-auth-httplib2==0.4.0
2 changes: 1 addition & 1 deletion scripts/requirements.txt
Original file line number Diff line number Diff line change
@@ -1 +1 @@
pandas==2.2.2
pandas==3.0.5
Loading