CIワークフローの実行設定を強化

[ai-kurou]

概要

KoDriver の CI 設定を参考に、AndroidPods の通常 CI workflow の実行設定を強化します。

変更内容

• PR workflow に concurrency を追加し、同一ブランチの古い実行をキャンセル
• workflow のデフォルト権限を contents: read に制限
• 各 job に timeout-minutes を追加
• 書き込み不要な checkout で persist-credentials: false を設定
• GitHub Actions の参照を tag から commit SHA に pinning

検証

• ruby -e 'require "yaml"; ARGV.each { |f| YAML.load_file(f); puts "OK #{f}" }' .github/workflows/on-pull-request.yml .github/workflows/on-main-merge.yml\n- git diff --check\n\nNote: ローカルに actionlint が無かったため、actionlint による検証は未実施です。

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: f6c258d5-c363-4b77-8fc0-67a728bc1c94

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud