Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions .github/workflows/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -21,12 +21,12 @@ jobs:
steps:

- name: Harden Runner
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 - 2025.01.20
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 - 2026.02.08
with:
egress-policy: audit

- name: Checkout
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - 2024.10.23
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - 2026.01.09
with:
ref: ${{ github.event.pull_request.head.sha }}

Expand All @@ -51,7 +51,7 @@ jobs:

- name: Upload output
if: always()
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 - 2025.01.09
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 - 2025.12.12
with:
name: output.json
path: output.json
61 changes: 30 additions & 31 deletions .github/workflows/benchmark.yml
Original file line number Diff line number Diff line change
Expand Up @@ -23,15 +23,15 @@ jobs:
steps:

- name: Harden Runner
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 - 2025.01.20
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 - 2026.02.08
with:
egress-policy: audit

- name: Checkout CredData
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - 2024.10.23
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - 2026.01.09
with:
repository: Samsung/CredData
ref: 76eb5b21f363b4fe95c683514beb215ea60a6347
ref: 32205f28c21c9fcc7fa1bcc5fa2f9dc28b572032

- name: Markup hashing
run: |
Expand All @@ -43,7 +43,7 @@ jobs:

- name: Cache data
id: cache-data
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0 - 2024.12.05
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3 - 2026.01.29
with:
path: data
key: cred-data-${{ hashFiles('checksums.md5') }}
Expand Down Expand Up @@ -79,15 +79,15 @@ jobs:
steps:

- name: Harden Runner
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 - 2025.01.20
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 - 2026.02.08
with:
egress-policy: audit

- name: Checkout CredData
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - 2024.10.23
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - 2026.01.09
with:
repository: Samsung/CredData
ref: 76eb5b21f363b4fe95c683514beb215ea60a6347
ref: 32205f28c21c9fcc7fa1bcc5fa2f9dc28b572032

- name: Markup hashing
run: |
Expand All @@ -99,7 +99,7 @@ jobs:

- name: Cache data
id: cache-data
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0 - 2024.12.05
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3 - 2026.01.29
with:
path: data
key: cred-data-${{ hashFiles('checksums.md5') }}
Expand All @@ -124,7 +124,7 @@ jobs:
run: python -m pip install --requirement requirements.txt

- name: Checkout CredSweeper
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - 2024.10.23
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - 2026.01.09
with:
ref: ${{ github.event.pull_request.head.sha }}
path: temp/CredSweeper
Expand All @@ -144,21 +144,21 @@ jobs:

- name: Upload CredSweeper log
if: always()
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 - 2025.01.09
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 - 2025.12.12
with:
name: credsweeper
path: credsweeper.${{ github.event.pull_request.head.sha }}.log

- name: Upload CredSweeper report
if: always()
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 - 2025.01.09
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 - 2025.12.12
with:
name: report
path: report.${{ github.event.pull_request.head.sha }}.json

- name: Upload benchmark output
if: always()
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 - 2025.01.09
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 - 2025.12.12
with:
name: benchmark
path: benchmark.${{ github.event.pull_request.head.sha }}.log
Expand All @@ -177,20 +177,20 @@ jobs:
strategy:
fail-fast: false
matrix:
python-version: [ "3.10", "3.11", "3.12", "3.13" ]
python-version: [ "3.10", "3.11", "3.12", "3.13", "3.14" ]

steps:

- name: Harden Runner
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 - 2025.01.20
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 - 2026.02.08
with:
egress-policy: audit

- name: Checkout CredData
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - 2024.10.23
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - 2026.01.09
with:
repository: Samsung/CredData
ref: 76eb5b21f363b4fe95c683514beb215ea60a6347
ref: 32205f28c21c9fcc7fa1bcc5fa2f9dc28b572032

- name: Markup hashing
run: |
Expand All @@ -202,7 +202,7 @@ jobs:

- name: Cache data
id: cache-data
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0 - 2024.12.05
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3 - 2026.01.29
with:
path: data
key: cred-data-${{ hashFiles('checksums.md5') }}
Expand Down Expand Up @@ -252,7 +252,7 @@ jobs:
python -m pip uninstall -y credsweeper

- name: Checkout base CredSweeper
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - 2024.10.23
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - 2026.01.09
with:
ref: ${{ github.event.pull_request.base.sha }}
path: temp/CredSweeper.base
Expand All @@ -278,7 +278,7 @@ jobs:
echo "BASE_TIME=${BASE_TIME}" >> $GITHUB_ENV

- name: Checkout current CredSweeper
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - 2024.10.23
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - 2026.01.09
with:
ref: ${{ github.event.pull_request.head.sha }}
path: temp/CredSweeper.head
Expand Down Expand Up @@ -370,15 +370,15 @@ jobs:
steps:

- name: Harden Runner
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 - 2025.01.20
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 - 2026.02.08
with:
egress-policy: audit

- name: Checkout CredData
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - 2024.10.23
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - 2026.01.09
with:
repository: Samsung/CredData
ref: 76eb5b21f363b4fe95c683514beb215ea60a6347
ref: 32205f28c21c9fcc7fa1bcc5fa2f9dc28b572032

- name: Markup hashing
run: |
Expand All @@ -390,7 +390,7 @@ jobs:

- name: Cache data
id: cache-data
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0 - 2024.12.05
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3 - 2026.01.29
with:
path: data
key: cred-data-${{ hashFiles('checksums.md5') }}
Expand All @@ -416,7 +416,7 @@ jobs:
run: python -m pip install --upgrade pip

- name: Checkout current CredSweeper
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - 2024.10.23
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - 2026.01.09
with:
ref: ${{ github.event.pull_request.head.sha }}
path: CredSweeper.head
Expand All @@ -434,16 +434,15 @@ jobs:
- name: Run the experiment
run: |
cd CredSweeper.head
ls -al #dbg
pwd #dbg
pwd # dbg
ls -al # dbg
export PYTHONPATH=$(pwd):${PYTHONPATH}
cd experiment
# check whether credsweeper is available as module
python -m credsweeper --banner
# use only 2 epochs for the test
python main.py --data ${{ github.workspace }}/CredData --jobs $(( 2 * $(nproc) )) --epochs 2
# dbg
git diff
git diff # dbg
# crc32 should be changed
python -m credsweeper --banner
# train artifacts check
Expand All @@ -467,19 +466,19 @@ jobs:
if: ${{ 'push' == github.event_name }} or ${{ 'Samsung/CredSweeper' == github.event.pull_request.head.repo.full_name }}
steps:
- name: Harden Runner
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 - 2025.01.20
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 - 2026.02.08
with:
egress-policy: audit

- name: Checkout CredSweeper PR
if: ${{ 'pull_request' == github.event_name }}
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - 2024.10.23
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - 2026.01.09
with:
ref: ${{ github.event.pull_request.head.sha }}

- name: Checkout CredSweeper HEAD
if: ${{ 'push' == github.event_name }}
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - 2024.10.23
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - 2026.01.09
with:
ref: ${{ github.event.head }}

Expand Down
26 changes: 18 additions & 8 deletions .github/workflows/check.yml
Original file line number Diff line number Diff line change
Expand Up @@ -22,13 +22,13 @@ jobs:
# # # MUST be full history to check git workflow

- name: Harden Runner
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 - 2025.01.20
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 - 2026.02.08
with:
egress-policy: audit

- name: Checkout
id: code_checkout
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - 2024.10.23
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - 2026.01.09
with:
fetch-depth: 0
ref: ${{ github.event.pull_request.head.sha }}
Expand Down Expand Up @@ -74,16 +74,17 @@ jobs:
id: setup_python
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 - 2026.01.22
with:
python-version: "3.13"
python-version: "3.14"

- name: Install CredSweeper and auxiliary packages
id: setup_credsweeper
if: ${{ always() && steps.setup_python.conclusion == 'success' }}
run: |
python --version #dbg
python --version # dbg
python -m pip install --upgrade pip
python -m pip --version # dbg
pip install --requirement requirements.txt
pip list #dbg
pip freeze # dbg

# # # Banner with builtin python binascii.crc32 sum which is zip standard (not cksum result)

Expand All @@ -92,7 +93,7 @@ jobs:
run: |
banner="$(python -m credsweeper --banner | grep CredSweeper | head -1)"
echo "banner = '${banner}'"
if [ "CredSweeper 1.14.7 crc32:adbdc773" != "${banner}" ]; then
if [ "CredSweeper 1.14.8 crc32:a6e1804e" != "${banner}" ]; then
echo "Update the check for '${banner}'"
exit 1
fi
Expand All @@ -115,6 +116,10 @@ jobs:
if: ${{ always() && steps.setup_credsweeper.conclusion == 'success' }}
run: pylint --py-version=3.13 --verbose credsweeper

- name: Analysing the code with pylint and minimum Python version 3.14
if: ${{ always() && steps.setup_credsweeper.conclusion == 'success' }}
run: pylint --py-version=3.14 --verbose credsweeper

# # # mypy

- name: Analysing the code with mypy and minimum Python version 3.10
Expand All @@ -137,6 +142,11 @@ jobs:
run: |
mypy --config-file .mypy.ini --python-version=3.13 credsweeper

- name: Analysing the code with mypy and minimum Python version 3.14
if: ${{ always() && steps.setup_credsweeper.conclusion == 'success' }}
run: |
mypy --config-file .mypy.ini --python-version=3.14 credsweeper

# # # Documentation check

- name: Test for creation sphinx documentations
Expand Down Expand Up @@ -170,7 +180,7 @@ jobs:

- name: FLAKE 8 reports
if: ${{ failure() && steps.test_flake8.conclusion == 'failure' }}
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 - 2025.01.09
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 - 2025.12.12
with:
name: flake8_report
path: flake8.txt
Expand Down Expand Up @@ -207,4 +217,4 @@ jobs:

- name: Dependency Review
if: ${{ 'push' != github.event_name }}
uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5.0 - 2024.11.20
uses: actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4.8.2 - 2025.11.11
10 changes: 5 additions & 5 deletions .github/workflows/fuzz.yml
Original file line number Diff line number Diff line change
Expand Up @@ -22,12 +22,12 @@ jobs:
steps:

- name: Harden Runner
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 - 2025.01.20
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 - 2026.02.08
with:
egress-policy: audit

- name: Checkout
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - 2024.10.23
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - 2026.01.09
with:
ref: ${{ github.event.pull_request.head.sha }}

Expand All @@ -52,7 +52,7 @@ jobs:

- name: Store coverage report
if: always()
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 - 2025.01.09
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 - 2025.12.12
with:
name: htmlcov
path: htmlcov
Expand All @@ -79,7 +79,7 @@ jobs:

- name: New corpus upload
if: ${{ env.NEW_CORPUS > 0 }}
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 - 2025.01.09
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 - 2025.12.12
with:
name: new_corpus
path: new_corpus
Expand All @@ -102,7 +102,7 @@ jobs:

- name: Crash corpus upload
if: ${{ env.CRASH_CORPUS > 0 }}
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 - 2025.01.09
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 - 2025.12.12
with:
name: crash_corpus
path: crash_corpus
7 changes: 3 additions & 4 deletions .github/workflows/pypi.yml
Original file line number Diff line number Diff line change
Expand Up @@ -19,12 +19,12 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Harden Runner
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 - 2025.01.20
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 - 2026.02.08
with:
egress-policy: audit

- name: Checkout
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - 2024.10.23
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - 2026.01.09
with:
ref: ${{ github.event.pull_request.head.sha }}

Expand All @@ -40,8 +40,7 @@ jobs:
pip freeze
python -m build
twine check dist/*
# dbg
find dist -name "*.whl" -exec unzip -d dbg {} +
find dist -name "*.whl" -exec unzip -d dbg {} + # dbg
find dbg -name METADATA -type f -exec cat --number {} +

- name: Publish
Expand Down
Loading
Loading