Matt Moore
002e1a441e
Support uppercase repository names with cosign.
...
My previous PR didn't properly handle uppercase usernames (or repository names) when signing container images with `cosign`.
It seems that the `docker buildx --push` doesn't like this either, but it's passed the output of the `docker/metadata-action` which seems to lowercase things.
Fixes: https://github.com/actions/starter-workflows/issues/1293
Signed-off-by: Matt Moore <[email protected]
2022-03-16 11:48:28 -07:00
Jonathan Tamsut
46017054a3
Update download-artifact and upload-artifact from v2 to v3 ( #1465 )
...
* migrate to v3
* update download-artifact
2022-03-14 10:35:28 -04:00
Bishal Prasad
0d462e1c6b
Port reworked AKS templates to main ( #1450 )
2022-03-03 22:43:12 +05:30
Nick Fyson
aab5969536
Merge pull request #1417 from arjundashrath/patch-9
...
Add token permissions for code-scanning/msvc.yml
2022-03-02 09:14:44 +00:00
Nick Fyson
1294763b98
Merge branch 'main' into patch-9
2022-03-02 09:12:21 +00:00
Nick Fyson
fce947f2a5
Merge pull request #1419 from Devils-Knight/permks-2
...
Add token permissions for code-scanning/brakeman.yml
2022-03-01 19:31:13 +00:00
Nick Fyson
8a394a4869
Merge branch 'main' into permks-2
2022-03-01 19:27:20 +00:00
Nick Fyson
44bb7ab675
Merge pull request #1381 from arjundashrath/arjundashrath-patch-1
...
Add token permissions for code-scanning/codacy.yml
2022-02-27 14:38:11 +00:00
Nick Fyson
f68379356a
Merge branch 'main' into arjundashrath-patch-1
2022-02-27 14:36:48 +00:00
Nick Fyson
6897aeb2a0
Merge pull request #1418 from Devils-Knight/permks-1
...
Add token permissions for code-scanning/apisec-scan.yml
2022-02-27 14:31:31 +00:00
Nick Fyson
a5b7a6b2c5
Merge branch 'main' into permks-1
2022-02-27 14:30:43 +00:00
Nick Fyson
b7e4c6aebc
Merge pull request #1409 from arjundashrath/patch-1
...
Add token permissions for code-scanning/veracode.yml
2022-02-27 14:29:45 +00:00
Nick Fyson
661f311aa8
Merge branch 'main' into patch-1
2022-02-27 14:29:09 +00:00
Nick Fyson
5175b2b06c
Merge pull request #1444 from arjundashrath/patch-10
...
Add token permissions for code-scanning/sysdig-scan.yml
2022-02-27 14:26:11 +00:00
Nick Fyson
73ecf4a25c
Merge branch 'main' into patch-10
2022-02-27 14:25:31 +00:00
Nick Fyson
7c42ec25f2
Merge pull request #1412 from arjundashrath/patch-4
...
Add token permissions for code-scanning/prisma.yml
2022-02-27 14:23:29 +00:00
Nick Fyson
16d6445e9f
Merge branch 'main' into patch-4
2022-02-27 14:23:00 +00:00
Nick Fyson
0c8eb3d2ad
Merge pull request #1435 from Devils-Knight/permks-13
...
Add token permissions for code-scanning/mobsf.yml
2022-02-27 14:20:37 +00:00
Nick Fyson
8879d481fb
Merge branch 'main' into permks-13
2022-02-27 14:19:33 +00:00
Nick Fyson
59afd3e888
Merge pull request #1447 from laurentsimon/feat/scorecard-v1.0.4
...
Update hash for scorecard's v1.0.4 release
2022-02-27 14:16:03 +00:00
Nick Fyson
638f638347
Merge branch 'main' into feat/scorecard-v1.0.4
2022-02-27 14:15:18 +00:00
Atul Malaviya
300f303442
Added PR trigger ( #1448 )
2022-02-20 13:48:18 +05:30
laurentsimon
ed9202263d
Update hash for scorecard's v1.0.4 release
2022-02-18 01:00:27 +00:00
arjundashrath
6a5dc3a753
Update sysdig-scan.yml
2022-02-17 08:50:23 +05:30
Nick Fyson
8596c57868
Merge branch 'main' into permks-13
2022-02-16 11:18:33 +00:00
Nick Fyson
8573ed9cf5
Merge pull request #1416 from arjundashrath/patch-8
2022-02-16 10:50:19 +00:00
Nick Fyson
48d70bb057
Merge branch 'main' into patch-8
2022-02-16 10:47:11 +00:00
Nick Fyson
bf12b3d01a
Merge branch 'main' into permks-13
2022-02-16 10:09:07 +00:00
Nick Fyson
5a06c8f464
Merge pull request #1404 from h0x0er/patch-7
...
Added github_token permissions in code-scanning/semgrep.yml
2022-02-16 10:07:51 +00:00
Nick Fyson
0c9bd866a7
Merge branch 'main' into patch-7
2022-02-16 10:00:27 +00:00
Nick Fyson
e53dd812a5
Merge pull request #1424 from Devils-Knight/permks-7
...
Add token permissions for code-scanning/stackhawk.yml
2022-02-16 09:53:27 +00:00
Nick Fyson
dc87bafe6f
Merge branch 'main' into permks-7
2022-02-16 09:52:35 +00:00
Nick Fyson
af74f124fb
Merge pull request #1432 from Devils-Knight/permks-10
...
Add token permissions for code-scanning/njsscan.yml
2022-02-16 09:20:03 +00:00
Shubham malik
3394a8e62f
Update mobsf.yml
2022-02-15 16:38:05 +05:30
Shubham malik
6706b36121
Update njsscan.yml
2022-02-15 16:04:39 +05:30
Shubham malik
aa4aa29543
Update stackhawk.yml
2022-02-14 15:51:06 +05:30
Shubham malik
f6474e2bfa
Update brakeman.yml
2022-02-14 15:23:03 +05:30
Shubham malik
ab9bdce2e3
Update apisec-scan.yml
2022-02-14 15:19:56 +05:30
arjundashrath
b93e51dac6
Update msvc.yml
2022-02-14 13:11:47 +05:30
arjundashrath
4333c79965
Update codacy.yml
2022-02-14 13:08:08 +05:30
arjundashrath
d8a2673986
Update prisma.yml
2022-02-14 12:59:51 +05:30
arjundashrath
b90ea0582a
Update veracode.yml
2022-02-14 12:43:26 +05:30
h0x0er
14ce90e99f
added github_token permissions
2022-02-14 11:13:30 +05:30
Chris Gavin
7fb1c31151
Merge pull request #1402 from actions/fix-enterprise-exclusions
...
Fix some workflows not being excluded from Enterprise syncing.
2022-02-11 17:02:20 +00:00
Chris Gavin
4579cb5c54
Fix some workflows not being excluded from Enterprise syncing.
2022-02-11 15:03:41 +00:00
Nick Fyson
e9cc9b14bc
Merge pull request #1397 from adangel/update-pmd
...
Update pmd to v1.2.0
2022-02-11 09:50:48 +00:00
Andreas Dangel
d580918e06
Update pmd to v1.2.0
...
* Use pmd/pmd-github-action@967a81f8b6
which is v1.2.0
* Remove "cache: maven" setting, which fails if no pom.xml file
is existing
* Set parameter "analyzeModifiedFilesOnly: false" to prevent incomplete
analysis results. See also https://github.com/pmd/pmd-github-action/issues/35
2022-02-10 18:10:25 +01:00
Nick Fyson
2e489c2619
Merge pull request #1368 from Devils-Knight/Permissions
...
Add token permissions for code-scanning/crunch42.yml
2022-02-04 14:38:09 +00:00
Nick Fyson
53217fe594
Merge branch 'main' into Permissions
2022-02-04 14:37:22 +00:00
Nick Fyson
64ccdd2a47
Merge pull request #1373 from h0x0er/main
...
Added GITHUB_TOKEN permission for code-scanning/anchore.yml
2022-02-04 10:45:44 +00:00
Matt Moore