Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/autoformat-pixeebot-prs.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -16,12 +16,12 @@
uses: actions/checkout@v6

- name: Set up Python
uses: actions/setup-python@v6
uses: actions/setup-python@v7
with:
python-version: "3.14"

- name: Install black
run: pip install black

Check warning on line 24 in .github/workflows/autoformat-pixeebot-prs.yaml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC75Fxezt7eMS3Rmt&open=AZ_jC75Fxezt7eMS3Rmt&pullRequest=1123

Check warning on line 24 in .github/workflows/autoformat-pixeebot-prs.yaml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC75Fxezt7eMS3Rmu&open=AZ_jC75Fxezt7eMS3Rmu&pullRequest=1123

- name: Apply black formatting
run: black .
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/codemod_pygoat.yml
Original file line number Diff line number Diff line change
Expand Up @@ -24,14 +24,14 @@
- name: Check out codemodder
uses: actions/checkout@v6
- name: Set Up Python
uses: actions/setup-python@v6
uses: actions/setup-python@v7
with:
python-version: '3.14'
cache: 'pip'
- name: Install Codemodder Package
run: pip install .

Check warning on line 32 in .github/workflows/codemod_pygoat.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC76hxezt7eMS3Rm3&open=AZ_jC76hxezt7eMS3Rm3&pullRequest=1123

Check warning on line 32 in .github/workflows/codemod_pygoat.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC76hxezt7eMS3Rm4&open=AZ_jC76hxezt7eMS3Rm4&pullRequest=1123
- name: Install Test Dependencies
run: pip install ".[test]"

Check warning on line 34 in .github/workflows/codemod_pygoat.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC76hxezt7eMS3Rm6&open=AZ_jC76hxezt7eMS3Rm6&pullRequest=1123

Check warning on line 34 in .github/workflows/codemod_pygoat.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC76hxezt7eMS3Rm5&open=AZ_jC76hxezt7eMS3Rm5&pullRequest=1123
- name: Check out Pygoat
uses: actions/checkout@v6
with:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/deploy_to_pypi.yml
Original file line number Diff line number Diff line change
Expand Up @@ -12,13 +12,13 @@
timeout-minutes: 5
steps:
- name: Set Up Python
uses: actions/setup-python@v6
uses: actions/setup-python@v7
with:
python-version: '3.14'
- name: Check out code
uses: actions/checkout@v6
- name: Install build dependencies
run: pip install build twine

Check warning on line 21 in .github/workflows/deploy_to_pypi.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC72Pxezt7eMS3Rmr&open=AZ_jC72Pxezt7eMS3Rmr&pullRequest=1123

Check warning on line 21 in .github/workflows/deploy_to_pypi.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC72Pxezt7eMS3Rms&open=AZ_jC72Pxezt7eMS3Rms&pullRequest=1123
- name: Build package
run: python -m build .
- name: Twine Check
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/integration_test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -27,13 +27,13 @@
- name: Check out code
uses: actions/checkout@v6
- name: Set Up Python
uses: actions/setup-python@v6
uses: actions/setup-python@v7
with:
python-version: ${{ matrix.python-version }}
cache: 'pip'
- name: Install Codemodder Package
run: pip install .

Check warning on line 35 in .github/workflows/integration_test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC76yxezt7eMS3Rm8&open=AZ_jC76yxezt7eMS3Rm8&pullRequest=1123

Check warning on line 35 in .github/workflows/integration_test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC76yxezt7eMS3Rm7&open=AZ_jC76yxezt7eMS3Rm7&pullRequest=1123
- name: Install Dependencies
run: pip install ".[test]"

Check warning on line 37 in .github/workflows/integration_test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC76yxezt7eMS3Rm-&open=AZ_jC76yxezt7eMS3Rm-&pullRequest=1123

Check warning on line 37 in .github/workflows/integration_test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC76yxezt7eMS3Rm9&open=AZ_jC76yxezt7eMS3Rm9&pullRequest=1123
- name: Run integration tests
run: make integration-test
4 changes: 2 additions & 2 deletions .github/workflows/lint.yml
Original file line number Diff line number Diff line change
Expand Up @@ -24,13 +24,13 @@
- name: Check out code
uses: actions/checkout@v6
- name: Set Up Python
uses: actions/setup-python@v6
uses: actions/setup-python@v7
with:
python-version: '3.14'
cache: 'pip'
- name: Install Dependencies
run: |
pip install ".[complexity]"

Check warning on line 33 in .github/workflows/lint.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC77Hxezt7eMS3RnA&open=AZ_jC77Hxezt7eMS3RnA&pullRequest=1123

Check warning on line 33 in .github/workflows/lint.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC77Hxezt7eMS3Rm_&open=AZ_jC77Hxezt7eMS3Rm_&pullRequest=1123
- name: Run Radon
run: make radon
- name: Run Xenon
Expand All @@ -42,5 +42,5 @@
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v6
- uses: actions/setup-python@v6
- uses: actions/setup-python@v7
- uses: pre-commit/action@v3.0.1
2 changes: 1 addition & 1 deletion .github/workflows/pre-commit-autoupdate.yml
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v6
- uses: actions/setup-python@v6
- uses: actions/setup-python@v7
- uses: browniebroke/pre-commit-autoupdate-action@main
- uses: peter-evans/create-pull-request@v7
with:
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -28,12 +28,12 @@
- name: Check out code
uses: actions/checkout@v6
- name: Set Up Python
uses: actions/setup-python@v6
uses: actions/setup-python@v7
with:
python-version: '3.14'
cache: 'pip'
- name: Install build dependencies
run: pip install build twine

Check warning on line 36 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC75cxezt7eMS3Rmv&open=AZ_jC75cxezt7eMS3Rmv&pullRequest=1123

Check warning on line 36 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC75cxezt7eMS3Rmw&open=AZ_jC75cxezt7eMS3Rmw&pullRequest=1123
- name: Build package
run: python -m build .
- name: Twine Check
Expand All @@ -47,13 +47,13 @@
- name: Check out code
uses: actions/checkout@v6
- name: Set Up Python
uses: actions/setup-python@v6
uses: actions/setup-python@v7
with:
python-version: '3.14'
cache: 'pip'
- name: Install Codemodder Package
# Only install what most users would, not optional dependencies
run: pip install .

Check warning on line 56 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC75cxezt7eMS3Rmy&open=AZ_jC75cxezt7eMS3Rmy&pullRequest=1123

Check warning on line 56 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC75cxezt7eMS3Rmx&open=AZ_jC75cxezt7eMS3Rmx&pullRequest=1123
- name: Run codemodder
run: codemodder --list
test:
Expand All @@ -67,14 +67,14 @@
- name: Check out code
uses: actions/checkout@v6
- name: Set Up Python
uses: actions/setup-python@v6
uses: actions/setup-python@v7
with:
python-version: ${{ matrix.python-version }}
cache: 'pip'
- name: Install Codemodder Package
run: pip install .

Check warning on line 75 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC75cxezt7eMS3Rmz&open=AZ_jC75cxezt7eMS3Rmz&pullRequest=1123

Check warning on line 75 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC75cxezt7eMS3Rm0&open=AZ_jC75cxezt7eMS3Rm0&pullRequest=1123
- name: Install Dependencies
run: pip install ".[test]"

Check warning on line 77 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC75cxezt7eMS3Rm1&open=AZ_jC75cxezt7eMS3Rm1&pullRequest=1123

Check warning on line 77 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=pixee_codemodder-python&issues=AZ_jC75cxezt7eMS3Rm2&open=AZ_jC75cxezt7eMS3Rm2&pullRequest=1123
- name: Run unit tests
run: make test
- name: Upload coverage reports to Codecov
Expand Down
Loading