Marco Gario and GitHub
a413869948
Merge pull request #2759 from felickz/patch-5
...
Code Scanning: bandit to latest hash
2025-03-05 14:09:23 +01:00
Chad Bentz and GitHub
c95135c3f9
Merge branch 'main' into patch-5
2025-03-05 01:28:16 -05:00
Spencer Schrock
4a5b4939a6
add future looking pull_request event to conditional
...
Scorecard currently has experimental support for the `pull_request`
trigger, so we want to allow analysis to be run for it in the future.
Signed-off-by: Spencer Schrock <[email protected] >
2025-02-24 11:32:33 -07:00
Josh Soref and Spencer Schrock
41e00af395
Limit scorecard to default branch
...
Signed-off-by: Josh Soref <[email protected] >
2025-02-24 11:32:28 -07:00
Spencer Schrock
f70f9c8252
bump action versions to latest to resolve issues
...
1. Scorecard update v2.4.1 was released, which includes months of bug
fixes and a new `file_mode` input to address a .gitattributes bug.
2. Bumped actions/upload-artifact to the v4 branch. This was previously
kept at v3 as GHES doesn't support v4, but github.com no longer
supports v3: as uploads return the following error "Create Artifact
Container failed: The artifact name JSON file is not valid."
Signed-off-by: Spencer Schrock <[email protected] >
2025-02-24 11:27:23 -07:00
AlexDeMichieli and GitHub
a00915e13e
Merge pull request #2676 from blackduck-inc/main
...
Merging black-duck-security-scan template
2025-02-10 12:40:24 -08:00
Sadman Anik
fcdc1287fc
Fixed Linting Issues
2025-02-10 11:43:15 +06:00
Sadman Anik
345594d7f5
Updated actions/checkout v3 to v4
2025-02-07 14:47:21 +06:00
Sadman Anik
5969febe64
Resolved reviwed comments
2025-02-05 13:47:33 +06:00
Sadman Anik and GitHub
51a27e7024
Merge branch 'main' into main
2025-02-04 16:17:52 +06:00
Chad Bentz and GitHub
7db00754dc
Code Scanning: bandit to latest hash
...
ab1d87dfccc5a0ffab88be3aaac6ffe35c10d6cd
2025-02-03 15:12:05 -05:00
Orhan Toy and GitHub
55eb18560f
Merge pull request #2748 from aeisenberg/patch-3
...
Add comments to codeql.yml
2025-02-03 13:22:17 +01:00
Andrew Eisenberg and GitHub
adcb922ec2
Make the example setup more explicit.
2025-01-30 16:50:30 -08:00
Sadman Anik and GitHub
1de3a149b3
Update black-duck-security-scan-ci.yml
2025-01-30 13:48:02 +06:00
Andrew Eisenberg and GitHub
7398b4eca4
Remove trailing whitespace
2025-01-29 15:39:32 -08:00
Andrew Eisenberg and GitHub
2abfcee18d
Update codeql.yml
...
Explicitly suggest that users add their setup steps before calling init.
2025-01-29 14:23:54 -08:00
Sadman Anik and GitHub
56844b15c7
Merge branch 'main' into main
2025-01-28 12:45:05 +06:00
SOOS-GSteen and GitHub
9085976703
SOOS Dast Feature Update ( #2733 )
...
* Update soos-dast-scan.yml
* Update soos-dast-scan.yml
* Update soos-dast-scan.yml
2025-01-23 18:15:51 -06:00
Josh Gross and GitHub
1e05f3c86d
Update starter workflows to use the latest artifact actions ( #2726 )
...
* Update starter workflows to use the latest artifact actions
* Ensure incompatible artifact actions aren't synced to GHES
2025-01-21 15:06:02 -05:00
Oscar Reimer and Oscar Reimer
c8284a423c
Update debricked.yml
...
Update debricked.yml to use latest version debricked/actions
2025-01-16 14:03:53 +01:00
Beth Brennan and GitHub
f480e98459
Merge pull request #2465 from jsoref/bump-actions
...
Checkout: Update all workflows to use Checkout V4
2025-01-14 13:59:44 -05:00
Beth Brennan and GitHub
3cd0650576
Merge branch 'main' into bump-actions
2025-01-14 13:13:27 -05:00
95a3224907
Remove stray -
...
Co-authored-by: Beth Brennan <[email protected] >
2025-01-13 20:52:25 -05:00
Fabian Aguilar Gomez and GitHub
b001911fc6
Merge pull request #2720 from actions/update-ruby
...
Update jekyll.yml
2025-01-13 15:05:21 -06:00
Fabian Aguilar Gomez and GitHub
f8ea592ee6
Update jekyll.yml
2025-01-13 14:54:01 -06:00
Beth Brennan and GitHub
f4f8d50fb6
Merge pull request #2711 from jsoref/fix-octopus-deploy
...
Fix octopus deploy
2025-01-13 12:59:45 -05:00
Beth Brennan and GitHub
016b90714a
Merge branch 'main' into fix-octopus-deploy
2025-01-13 12:56:22 -05:00
Beth Brennan and GitHub
a38d8caf42
Merge pull request #2464 from jsoref/ubuntu-latest
...
Ubuntu-Latest: Update all workflows to use ubuntu-latest
2025-01-13 12:54:55 -05:00
Beth Brennan and GitHub
e1deb63e94
Merge branch 'main' into ubuntu-latest
2025-01-13 12:52:40 -05:00
Josh Soref
be1cddbe1d
Checkout: Update all workflows to use Checkout V4
2025-01-06 09:43:57 -05:00
Josh Soref
d9c5f62b74
Fix sentence style
...
Signed-off-by: Josh Soref <[email protected] >
2025-01-06 09:25:40 -05:00
Josh Soref
17f0d2485e
Use unix line endings
...
Signed-off-by: Josh Soref <[email protected] >
2025-01-06 09:25:36 -05:00
Josh Soref
9351ace4ef
Remove trailing whitespace
...
> trim trailing whitespace.................................................Failed
> - hook id: trailing-whitespace
> - exit code: 1
> - files were modified by this hook
>
> Fixing deployments/octopusdeploy.yml
Signed-off-by: Josh Soref <[email protected] >
2025-01-06 09:25:31 -05:00
Sadman Anik and GitHub
9e76f8420e
Merge pull request #2 from blackduck-inc/blackducksecurityscan-template
...
Used hash instead of tag name
2024-12-23 16:50:51 +06:00
Sadman Anik
84747ed355
Used hash instead of tag name
2024-12-23 16:49:39 +06:00
Sadman Anik and GitHub
1c8781f5a6
Merge pull request #1 from blackduck-inc/blackducksecurityscan-template
...
Blackducksecurityscan template
2024-12-18 18:08:10 +06:00
Sadman Anik
4a84ccf8e0
Added black duck security scan action template
2024-12-18 18:07:23 +06:00
Sadman Anik
1cc1562949
Added Black-Duck-Security-Scan logo
2024-12-18 17:52:20 +06:00
f90b59f7cd
Add Octopus Deploy release and deploy workflow ( #2651 )
...
* Create Octopus Deploy workflow template
* add properties file
* Pin step versions
* update some text
* add octopus icon
* added linebreak
Co-authored-by: Alexis Abril <[email protected] >
* added linebreak
Co-authored-by: Alexis Abril <[email protected] >
* update octopusdeploy icon name
---------
Co-authored-by: Alexis Abril <[email protected] >
2024-12-13 10:54:28 -06:00
Beth Brennan and GitHub
dfc0cdc56b
Merge pull request #2345 from trail-of-forks/ww/trusted-publish
...
ci/python-publish: bump, use trusted publishing
2024-11-22 10:03:25 -05:00
William Woodruff and GitHub
00795b7fee
Apply suggestions from code review
2024-11-22 09:48:05 -05:00
eee067e3ca
Apply suggestions from code review
...
Co-authored-by: Zach Steindler <[email protected] >
2024-11-22 09:47:32 -05:00
Ruud Senden
0486897d48
Update action version, update comment
2024-11-22 14:24:04 +01:00
Ruud Senden
1c6c18c8ea
Remove trailing spaces
2024-11-08 11:31:30 +01:00
Ruud Senden
196973618e
Remove trailing spaces
2024-11-08 11:30:15 +01:00
Ruud Senden
4cbe5359f3
Update Fortify starter workflow
2024-11-08 11:18:15 +01:00
eb32979001
Update ci/python-publish.yml
...
Co-authored-by: Sviatoslav Sydorenko (Святослав Сидоренко) <[email protected] >
2024-11-06 21:03:35 -05:00
347784759f
Update ci/python-publish.yml
...
Co-authored-by: Sviatoslav Sydorenko (Святослав Сидоренко) <[email protected] >
2024-11-06 17:10:48 -05:00
William Woodruff and GitHub
66c4bdd7f5
Merge branch 'main' into ww/trusted-publish
2024-11-05 12:52:19 -05:00
958eb20360
Update ci/python-publish.yml
...
Co-authored-by: Sviatoslav Sydorenko (Святослав Сидоренко) <[email protected] >
2024-11-05 12:50:41 -05:00