mirror of https://github.com/ilammy/msvc-dev-cmd.git synced 2026-09-06 21:57:19 +08:00

T

ilammy ddf4cb029f Fail audit on moderate and above vulnerabilities

Set the threshold to "moderate" and above. Currently msvc-dev-cmd has
an issue in transitive dev-dependency "minimist" [1] via somewhat long
chain of dependencies:

  - eslint > file-entry-cache > flat-cache > write > mkdirp > minimist
  - eslint > mkdirp > minimist

In order for this to be resolved all these packages need to do something
about their pinned versions. I don't want to sit there with a red build
because of some possible low-severity prototype pollution in dev
dependency. Anything higher -- okay, I'll look at at, and apply a fix
if necessary. (Maybe we should not audit dev dependencies at all...)

This particular vulnerability can be exploited by an attacker who can
submit a pull request and do "something bad"™ to Actions runners
executing jobs for this repository. However, since it's a dev
dependency, nothing will happen to our users. So we can safely ignore
this advisory.

[1]: https://npmjs.com/advisories/1179

2020-03-19 08:41:04 +02:00

.github/workflows

Fail audit on moderate and above vulnerabilities

2020-03-19 08:41:04 +02:00

.eslintrc.json

Initial action stub

2019-10-01 22:15:47 +03:00

.gitignore

Initial action stub

2019-10-01 22:15:47 +03:00

action.yml

Initial action stub

2019-10-01 22:15:47 +03:00

hello.c

Verify configured environment

2019-10-02 00:53:54 +03:00

index.js

Add VisualStudioVersion variable to exports (#3 )

2020-03-19 08:24:49 +02:00

LICENSE

Initial action stub

2019-10-01 22:15:47 +03:00

package-lock.json

Refresh dependencies

2020-03-12 12:54:03 +02:00

package.json

Refresh dependencies

2020-02-12 00:19:19 +02:00

README.md

Correct badge in README

2019-10-02 00:59:07 +03:00

README.md

msvc-dev-cmd

GitHub Action for configuring Developer Command Prompt for Microsoft Visual C++.

This sets up the environment for compiling C/C++ code from command line.

Supports Windows. Does nothing on Linux and macOS.

Inputs

arch – target architecture
- native compilation: x86, x64 (default), amd64 (synonym for x64)
- cross-compilation: x86_amd64, x86_arm, x86_arm64, amd64_x86, amd64_arm, amd64_arm64
sdk – Windows SDK to use
- do not specify to use the default SDK
- or specify full Windows 10 SDK number (e.g, 10.0.10240.0)
- or write 8.1 to use Windows 8.1 SDK
toolset – select VC++ compiler toolset version
- do not specify to use the default toolset
- 14.0 for VC++ 2015 Compiler Toolset
- 14.XX for the latest 14.XX toolset installed (e.g, 14.11)
- 14.XX.YYYYY for a specific full version number (e.g, 14.11.25503)
uwp – set true to build for Universal Windows Platform (i.e., for Windows Store)
spectre – set true to use Visual Studio libraries with Spectre mitigations

Example usage

jobs:
  test:
    - uses: actions/checkout@v1
    - uses: ilammy/msvc-dev-cmd@v1
    - name: Build something requiring CL.EXE
      run: |
        cmake -G "NMake Makefiles" .
        nmake
    # ...

License

MIT, see LICENSE.

README.md Unescape Escape

msvc-dev-cmd

Inputs

Example usage

License

README.md