Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion action.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -50,12 +50,12 @@
steps:
- name: 'Setup action/environment'
shell: bash
run: |
# Setup action/environment
if [ -z "${{ inputs.python_version }}" ]; then

Check failure on line 55 in action.yaml

View workflow job for this annotation

GitHub Actions / Audit Workflows

zizmor: zizmor/template-injection

code injection via template expansion: may expand into attacker-controllable code
echo 'Error: Python version was not provided ❌'; exit 1
else
echo "Using Python: ${{ inputs.python_version }} 🐍"

Check failure on line 58 in action.yaml

View workflow job for this annotation

GitHub Actions / Audit Workflows

zizmor: zizmor/template-injection

code injection via template expansion: may expand into attacker-controllable code
fi

# Handle path_prefix input consistently and when absent
Expand Down Expand Up @@ -84,7 +84,7 @@
python-version: ${{ inputs.python_version }}

- name: 'Cache Python dependencies'
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v4.0.2
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v4.0.2
with:
path: |
~/.cache/pip
Expand Down Expand Up @@ -123,13 +123,13 @@
fi

# Set appropriate flags to nbmake
if [ -n "${{ inputs.nbmake_kernel }}" ]; then

Check failure on line 126 in action.yaml

View workflow job for this annotation

GitHub Actions / Audit Workflows

zizmor: zizmor/template-injection

code injection via template expansion: may expand into attacker-controllable code

Check failure on line 126 in action.yaml

View workflow job for this annotation

GitHub Actions / Audit Workflows

zizmor: zizmor/template-injection

code injection via template expansion: may expand into attacker-controllable code

Check failure on line 126 in action.yaml

View workflow job for this annotation

GitHub Actions / Audit Workflows

zizmor: zizmor/template-injection

code injection via template expansion: may expand into attacker-controllable code
echo "Forcing use of a custom kernel: ${{ inputs.nbmake_kernel }} 💬"
echo "kernel_flags=--nbmake-kernel=${{ inputs.nbmake_kernel }}" \
>> "$GITHUB_ENV"
fi
# Set flags for parallel testing
if [ "${{ inputs.parallel_tests }}" = 'true' ]; then

Check failure on line 132 in action.yaml

View workflow job for this annotation

GitHub Actions / Audit Workflows

zizmor: zizmor/template-injection

code injection via template expansion: may expand into attacker-controllable code
echo "flags=-n=auto" >> "$GITHUB_ENV"
fi

Expand All @@ -154,8 +154,8 @@
shell: bash
run: |
# Install parallel test tool
echo "Installing custom nbmake kernel: ${{ inputs.nbmake_kernel }} ⬇️"

Check failure on line 157 in action.yaml

View workflow job for this annotation

GitHub Actions / Audit Workflows

zizmor: zizmor/template-injection

code injection via template expansion: may expand into attacker-controllable code
python -m ipykernel install --user --name "${{ inputs.nbmake_kernel }}"

Check failure on line 158 in action.yaml

View workflow job for this annotation

GitHub Actions / Audit Workflows

zizmor: zizmor/template-injection

code injection via template expansion: may expand into attacker-controllable code

- name: 'Build/test Jupyter Notebooks'
shell: bash
Expand All @@ -164,7 +164,7 @@
echo 'Searching repository for Jupyter Notebooks'
find "${{ env.path_prefix }}/" -name '*.ipynb'
if [ $? -eq 0 ]; then
if [ "f${{ inputs.permit_fail }}" = 'ftrue' ]; then

Check failure on line 167 in action.yaml

View workflow job for this annotation

GitHub Actions / Audit Workflows

zizmor: zizmor/template-injection

code injection via template expansion: may expand into attacker-controllable code
echo 'Warning: flag set to permit test failures ⚠️'
pytest --nbmake \
${{ inputs.pytest_flags }} \
Expand Down
Loading