github-advanced-security[bot] commented on code in PR #3078:
URL: https://github.com/apache/iceberg-python/pull/3078#discussion_r2838486258
##########
.github/workflows/python-ci.yml:
##########
@@ -200,3 +200,26 @@
merge-multiple: true
- name: Generate coverage report (75%) # Coverage threshold should only
increase over time — never decrease it!
run: COVERAGE_FAIL_UNDER=75 make coverage-report
+
+ cibw-dev-env-smoke-test:
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@v6
+ - uses: actions/setup-python@v6
+ with:
+ python-version: '3.12'
+ - name: Install UV
+ uses: astral-sh/setup-uv@v7
+ with:
+ enable-cache: true
+ # Why this exists:
+ # Catch import-time regressions (e.g., global conftest optional deps)
+ # in the same dev-only environment used by cibuildwheel wheel tests.
+ # Keep this in sync with wheel build test setup in
+ # .github/workflows/pypi-build-artifacts.yml:
+ # CIBW_BEFORE_TEST: uv sync --directory {project} --only-group dev
--no-install-project
+ # CIBW_TEST_COMMAND: uv run --directory {project} pytest
tests/avro/test_decoder.py
+ - name: Mirror wheel CIBW_BEFORE_TEST
+ run: uv sync --directory . --only-group dev --no-install-project
+ - name: Mirror wheel CIBW_TEST_COMMAND (collection only)
+ run: uv run --directory . pytest --collect-only
tests/avro/test_decoder.py -q
Review Comment:
## Workflow does not contain permissions
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN.
Consider setting an explicit permissions block, using the following as a
minimal starting point: {{contents: read}}
[Show more
details](https://github.com/apache/iceberg-python/security/code-scanning/21)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
