Skip to content

ci: add actions-security job to audit GitHub Actions usage #4260

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
germa89 merged 9 commits into from
Oct 20, 2025
Merged

ci: add actions-security job to audit GitHub Actions usage #4260

Changes from 1 commit
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
ff7d10d
ci: add actions-security job to audit GitHub Actions usage
germa89 Oct 15, 2025
ade4c71
chore: adding changelog file 4260.maintenance.md [dependabot-skip]
pyansys-ci-bot Oct 15, 2025
84b0d9d
ci: pin GitHub Actions to specific SHAs to stabilize and make workflo…
germa89 Oct 15, 2025
f290776
ci: standardize checkout and env handling across GitHub Actions
germa89 Oct 15, 2025
4cda1ad
ci: standardize workflow permissions and add job-level scopes
germa89 Oct 20, 2025
ed048b4
chore: merge branch 'ci/fixing-some-security-issues' into ci/adding-c…
germa89 Oct 20, 2025
6ec2f49
chore: merge remote-tracking branch 'origin/main' into ci/adding-chec…
germa89 Oct 20, 2025
a667de9
ci: use build-wheelhouse 'activate-venv' output for PYTHON_ACTIVATE
germa89 Oct 20, 2025
eacca68
chore: retriggering CICD
germa89 Oct 20, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -151,6 +151,16 @@ jobs:
python-package-name: ${{ env.PACKAGE_NAME }}
dev-mode: ${{ github.ref != 'refs/heads/main' }}

actions-security:
name: "Check actions security"
runs-on: ubuntu-latest
steps:
- uses: ansys/actions/check-actions-security@c2fa7c93f6883114e0e643599431b33d29f0b13f #v10.1.4
with:
generate-summary: true
token: ${{ secrets.GITHUB_TOKEN }}
auditing-level: 'high'
trust-ansys-actions: true

docs-build:
name: "Build documentation"
Expand Down
Loading