fix ci allowlist (#157)

master
Cameron 2023-11-21 08:55:15 +10:00 committed by GitHub
parent 5d3d2790df
commit d9c7e4c412
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 17 additions and 21 deletions

View File

@ -22,20 +22,23 @@ jobs:
egress-policy: block egress-policy: block
allowed-endpoints: > allowed-endpoints: >
api.github.com:443 api.github.com:443
cdn.quay.io:443
cdn01.quay.io:443
cdn02.quay.io:443
cdn03.quay.io:443 cdn03.quay.io:443
crates.io:443 crates.io:443
files.pythonhosted.org:443
ghcr.io:443
github.com:443 github.com:443
index.crates.io:443
objects.githubusercontent.com:443 objects.githubusercontent.com:443
uploads.github.com:443
pkg-containers.githubusercontent.com:443
pypi.org:443
quay.io:443 quay.io:443
sh.rustup.rs:443 sh.rustup.rs:443
static.crates.io:443 static.crates.io:443
index.crates.io:443
static.rust-lang.org:443 static.rust-lang.org:443
uploads.github.com:443
pypi.org:443
files.pythonhosted.org:443
ghcr.io:443
pkg-containers.githubusercontent.com:443
- uses: actions/checkout@61b9e3751b92087fd0b06925ba6dd6314e06f089 - uses: actions/checkout@61b9e3751b92087fd0b06925ba6dd6314e06f089
- uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
@ -43,13 +46,13 @@ jobs:
python-version: 3.8 python-version: 3.8
architecture: x64 architecture: x64
- uses: messense/maturin-action@683eb33e2cda131da55757dbac7628b2ef22df2f - uses: PyO3/maturin-action@683eb33e2cda131da55757dbac7628b2ef22df2f
with: with:
rust-toolchain: stable rust-toolchain: stable
manylinux: auto manylinux: auto
target: ${{ matrix.platform }} target: ${{ matrix.platform }}
command: build command: build
args: --release --sdist -o dist -i 3.8 3.9 3.10 3.11 args: --release --sdist -o dist -i 3.8 3.9 3.10 3.11 3.12
- name: Upload wheels - name: Upload wheels
uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # 3.1.3 uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # 3.1.3
@ -74,7 +77,7 @@ jobs:
with: with:
python-version: ${{ matrix.python-version }} python-version: ${{ matrix.python-version }}
- uses: messense/maturin-action@683eb33e2cda131da55757dbac7628b2ef22df2f - uses: PyO3/maturin-action@683eb33e2cda131da55757dbac7628b2ef22df2f
env: env:
PYO3_PYTHON: python${{ matrix.python-version }} PYO3_PYTHON: python${{ matrix.python-version }}
with: with:
@ -92,6 +95,7 @@ jobs:
strategy: strategy:
matrix: matrix:
python-version: ['3.8', '3.9', '3.10', '3.11', '3.12'] python-version: ['3.8', '3.9', '3.10', '3.11', '3.12']
target: ['universal2', 'x86_64-apple-darwin']
steps: steps:
- name: Harden Runner - name: Harden Runner
uses: step-security/harden-runner@1b05615854632b887b69ae1be8cbefe72d3ae423 uses: step-security/harden-runner@1b05615854632b887b69ae1be8cbefe72d3ae423
@ -103,23 +107,15 @@ jobs:
with: with:
python-version: ${{ matrix.python-version }} python-version: ${{ matrix.python-version }}
- name: Build wheels - x86_64 - name: Build wheels - ${{ matrix.target }}
uses: messense/maturin-action@683eb33e2cda131da55757dbac7628b2ef22df2f uses: PyO3/maturin-action@683eb33e2cda131da55757dbac7628b2ef22df2f
env: env:
PYO3_PYTHON: python${{ matrix.python-version }} PYO3_PYTHON: python${{ matrix.python-version }}
with: with:
target: x86_64-apple-darwin target: ${{ matrix.target }}
command: build command: build
args: --release -o dist args: --release -o dist
- name: Build wheels - universal2
uses: messense/maturin-action@683eb33e2cda131da55757dbac7628b2ef22df2f
env:
PYO3_PYTHON: python${{ matrix.python-version }}
with:
command: build
args: --release -o dist --universal2
- name: Upload wheels - name: Upload wheels
uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # 3.1.3 uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # 3.1.3
with: with:
@ -140,8 +136,8 @@ jobs:
allowed-endpoints: > allowed-endpoints: >
api.github.com:443 api.github.com:443
github.com:443 github.com:443
static.rust-lang.org:443
uploads.github.com:443 uploads.github.com:443
static.rust-lang.org:443
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0 - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
with: with: