ci: use git submodules for (securely) using third party Github Actions (#12709)

* Use git submodules for (securely) using third party Github Actions

List of repositories added as submodules:

EndBug/latest-tag@latest
morrisoncole/pr-lint-action@v1.4.1
trilom/file-changes-action@v1.2.4
styfle/cancel-workflow-action@0.6.0
apache-superset/cached-dependencies@b90713b
unsplash/comment-on-pr@v1.2.0
This commit is contained in:
Tobiasz Kędzierski
2021-01-24 08:10:16 +01:00
committed by GitHub
parent ef839f674d
commit 1f27b62d51
196 changed files with 131 additions and 62488 deletions

View File

@@ -43,14 +43,19 @@ jobs:
ports:
- 16379:6379
steps:
- name: Checkout code (push)
- name: "Checkout (pull) ${{ github.ref }} ( ${{ github.sha }} )"
uses: actions/checkout@v2
if: github.event_name == 'push'
with:
persist-credentials: false
submodules: recursive
- name: "Checkout (pull_request) ${{ github.ref }} ( ${{ github.sha }} )"
uses: actions/checkout@v2
- name: Checkout code (pull_request)
if: github.event_name == 'pull_request' || github.event_name == 'pull_request_target'
uses: actions/checkout@v2
with:
ref: "refs/pull/${{ github.event.number }}/merge"
persist-credentials: false
submodules: recursive
- name: Setup Python
uses: actions/setup-python@v2
with: