Skip to content

Commit af17860

Browse files
claudeclaude
committed
Merge remote-tracking branch 'origin/claude/new-session-th4e9w-readiness' into claude/new-session-th4e9w-audit
2 parents 8753c2f + a7777db commit af17860

3 files changed

Lines changed: 29 additions & 23 deletions

File tree

‎.github/workflows/actions.lock‎

Lines changed: 10 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -18,11 +18,11 @@ workflows:
1818
- 'actions/upload-pages-artifact@v5.0.0'
1919
- 'haskell-actions/setup@v2.12.1'
2020
'.github/workflows/chapel-ci.yml':
21-
- 'actions/cache@v6.1.0'
22-
- 'actions/checkout@v7.0.1'
23-
- 'actions/download-artifact@v8.0.2'
24-
- 'actions/upload-artifact@v7.0.2'
25-
- 'dtolnay/rust-toolchain@v1'
21+
- 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
22+
- 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
23+
- 'actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333'
24+
- 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
25+
- 'dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8'
2626
'.github/workflows/codeql.yml':
2727
- 'actions/checkout@v7.0.1'
2828
- 'github/codeql-action@v4.39.0'
@@ -114,6 +114,11 @@ dependencies:
114114
commit: 'sha1-368f82528645a54fb793d4d04e342629a3f51346'
115115
owner_id: 44036562
116116
repo_id: 438112499
117+
'actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333':
118+
ref: 'v8.0.2'
119+
commit: 'sha1-9000827ccba6bdab643e8b6fd33ac0654aef8333'
120+
owner_id: 44036562
121+
repo_id: 192626254
117122
'actions/download-artifact@v8.0.2':
118123
ref: 'v8.0.2'
119124
commit: 'sha1-9000827ccba6bdab643e8b6fd33ac0654aef8333'

‎.github/workflows/chapel-ci.yml‎

Lines changed: 17 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -72,7 +72,7 @@ jobs:
7272
outputs:
7373
relevant: ${{ steps.f.outputs.relevant }}
7474
steps:
75-
- uses: actions/checkout@v7.0.1
75+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
7676
with:
7777
fetch-depth: 2
7878
- id: f
@@ -105,7 +105,7 @@ jobs:
105105
runs-on: ubuntu-22.04
106106
timeout-minutes: 45
107107
steps:
108-
- uses: actions/checkout@v7.0.1
108+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
109109
- name: Install Chapel ${{ env.CHAPEL_VERSION }}
110110
run: |
111111
set -euo pipefail
@@ -128,7 +128,7 @@ jobs:
128128
runs-on: ubuntu-22.04
129129
timeout-minutes: 45
130130
steps:
131-
- uses: actions/checkout@v7.0.1
131+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
132132
- name: Install Chapel ${{ env.CHAPEL_VERSION }}
133133
run: |
134134
set -euo pipefail
@@ -144,7 +144,7 @@ jobs:
144144
chpl src/MassPanic.chpl src/Protocol.chpl src/Imaging.chpl src/Temporal.chpl -o mass-panic
145145
chpl smoke/two_repo_smoke.chpl src/Protocol.chpl src/Imaging.chpl -o smoke/two_repo_smoke
146146
- name: Upload Chapel artefacts
147-
uses: actions/upload-artifact@v7.0.2
147+
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
148148
with:
149149
name: chapel-binaries
150150
path: |
@@ -159,7 +159,7 @@ jobs:
159159
runs-on: ubuntu-22.04
160160
timeout-minutes: 45
161161
steps:
162-
- uses: actions/checkout@v7.0.1
162+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
163163
- name: Install Chapel ${{ env.CHAPEL_VERSION }}
164164
run: |
165165
set -euo pipefail
@@ -168,7 +168,7 @@ jobs:
168168
curl -fsSL --retry 3 -o /tmp/chapel.deb "${{ env.CHAPEL_DEB_URL }}"
169169
sudo apt-get install -y /tmp/chapel.deb
170170
- name: Download Chapel artefacts
171-
uses: actions/download-artifact@v8.0.2
171+
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
172172
with:
173173
name: chapel-binaries
174174
path: chapel/
@@ -184,7 +184,7 @@ jobs:
184184
runs-on: ubuntu-22.04
185185
timeout-minutes: 45
186186
steps:
187-
- uses: actions/checkout@v7.0.1
187+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
188188
- name: Install Chapel ${{ env.CHAPEL_VERSION }}
189189
run: |
190190
set -euo pipefail
@@ -193,7 +193,7 @@ jobs:
193193
curl -fsSL --retry 3 -o /tmp/chapel.deb "${{ env.CHAPEL_DEB_URL }}"
194194
sudo apt-get install -y /tmp/chapel.deb
195195
- name: Download Chapel artefacts
196-
uses: actions/download-artifact@v8.0.2
196+
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
197197
with:
198198
name: chapel-binaries
199199
path: chapel/
@@ -221,11 +221,11 @@ jobs:
221221
runs-on: ubuntu-22.04
222222
timeout-minutes: 45
223223
steps:
224-
- uses: actions/checkout@v7.0.1
225-
- uses: dtolnay/rust-toolchain@v1
224+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
225+
- uses: dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8 # v1
226226
with:
227227
toolchain: stable
228-
- uses: actions/cache@v6.1.0
228+
- uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
229229
with:
230230
path: |
231231
~/.cargo/registry
@@ -244,11 +244,11 @@ jobs:
244244
runs-on: ubuntu-22.04
245245
timeout-minutes: 45
246246
steps:
247-
- uses: actions/checkout@v7.0.1
248-
- uses: dtolnay/rust-toolchain@v1
247+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
248+
- uses: dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8 # v1
249249
with:
250250
toolchain: stable
251-
- uses: actions/cache@v6.1.0
251+
- uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
252252
with:
253253
path: |
254254
~/.cargo/registry
@@ -263,7 +263,7 @@ jobs:
263263
curl -fsSL --retry 3 -o /tmp/chapel.deb "${{ env.CHAPEL_DEB_URL }}"
264264
sudo apt-get install -y /tmp/chapel.deb
265265
- name: Download Chapel artefacts
266-
uses: actions/download-artifact@v8.0.2
266+
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
267267
with:
268268
name: chapel-binaries
269269
path: chapel/
@@ -283,15 +283,15 @@ jobs:
283283
env:
284284
CHPL_HOME: /opt/chapel-multilocale
285285
steps:
286-
- uses: actions/checkout@v7.0.1
286+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
287287

288288
# Cache the entire built-from-source Chapel tree. Key is stable across
289289
# PRs as long as the version, conduit, launcher and cache-gen marker
290290
# don't change. Cold build is ~30-40 min on a 2-core runner; warm
291291
# restore is ~30s.
292292
- name: Cache multilocale Chapel ($CHPL_HOME)
293293
id: chapel-cache
294-
uses: actions/cache@v6.1.0
294+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
295295
with:
296296
path: ${{ env.CHAPEL_MULTILOCALE_HOME }}
297297
key: ${{ runner.os }}-chapel-multilocale-${{ env.CHAPEL_VERSION }}-gasnet-smp-${{ env.CHAPEL_MULTILOCALE_CACHE_GEN }}

‎src/assail/mod.rs‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -411,7 +411,8 @@ pub fn apply_suppression(report: &mut AssailReport) {
411411
/// 3. UnsafeFFI finding where the file's [[ffi_kind]] is
412412
/// `BuildSystem` or `TestMock` (audit-accepted by default).
413413
///
414-
/// JIT context handling remains inline in analyzer.rs:1117..1129.
414+
/// JIT context handling remains in the transmute classification block of
415+
/// `Analyzer::analyze_rust` in `analyzer.rs`.
415416
///
416417
/// Fills missing `wp.test_context` for findings with a known file path so
417418
/// downstream audit consumers can render it. Returns the number of

0 commit comments

Comments
 (0)