actions/starter-workflows
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,350 Commits 26 Branches 0 Tags
1c8781f5a616c4fda4d5d34e435e7380808739bc
Commit Graph
2350 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Spencer SchrockGitHubAlexis Abril
 		4620c76b38 update Scorecard Action hashes and version comments (#2348) 
* update action hashes and version comments

ossf/scorecard-action v2.1.2 is old and doesnt work after a Sigstore
change. https://blog.sigstore.dev/tuf-root-update/

Signed-off-by: Spencer Schrock <[email protected]>

* downgrade actions/upload-artifact to node20 version of v3

dependabot will suggest upgrade to v4.3.1 for repos that can upgrade.
note: v3.pre.node20 is how dependabot refers to the pinned hash, so
use that so it can upgrade the comment

Signed-off-by: Spencer Schrock <[email protected]>

* upgrade github/codeql-action/upload-sarif to v3.24.9

Signed-off-by: Spencer Schrock <[email protected]>

---------

Signed-off-by: Spencer Schrock <[email protected]>
Co-authored-by: Alexis Abril <[email protected]>
 2024-03-27 13:25:03 -07:00
Andreas DeiningerandGitHub 831e9cb8e4 Bump workflow actions of various starter files (#2210) 2024-03-27 10:51:41 -07:00
Marco GarioandGitHub 4ccc742286 Merge pull request #2306 from actions/update_codeql_template 
Code Scanning Update codeql.yml with new build-mode
 2024-03-26 14:13:08 +01:00
Marco Gario fdbad9c74f Update codeql.yml 
links to docs
 2024-03-26 13:45:32 +01:00
Marco GarioandGitHub 97c6254b5e Merge branch 'main' into update_codeql_template 2024-03-26 13:35:12 +01:00
Marco GarioandGitHub aad9272438 Update codeql.yml 
Limit matrix information in the job name to language by default
 2024-03-26 13:18:17 +01:00
카기자판GitHubAlexis Abril
 		61cdce264d Updating nextjs.yml for Next.js 14 Support (#2204) 
* Update nextjs.yml

* Update nextjs.yml

---------

Co-authored-by: Alexis Abril <[email protected]>
 2024-03-25 16:26:55 -07:00
cclinandGitHub 0f4d22325b Update astro.yml for yarn based project 2024-03-25 16:05:58 +08:00
William Woodruff e44c7b519f python-publish: environment 
Signed-off-by: William Woodruff <[email protected]>
 2024-03-19 16:57:58 -04:00
William Woodruff 1fa8e18350 python-publish: copy gem-push.yml's pattern 
Signed-off-by: William Woodruff <[email protected]>
 2024-03-19 16:49:45 -04:00
William Woodruff e230215292 python-publish: explanatory comment 
Signed-off-by: William Woodruff <[email protected]>
 2024-03-19 16:42:35 -04:00
William Woodruff 231e6b5f6f python-publish: contents: read at toplevel 
Signed-off-by: William Woodruff <[email protected]>
 2024-03-19 16:41:37 -04:00
William WoodruffGitHubSviatoslav Sydorenko
 		f4c64fb836 Apply suggestions from code review 
Co-authored-by: Sviatoslav Sydorenko (Святослав Сидоренко) <[email protected]>
 2024-03-19 15:40:07 -04:00
William Woodruff 469c22e7a4 ci/python-publish: bump, use trusted publishing 
Signed-off-by: William Woodruff <[email protected]>
 2024-03-19 12:45:34 -04:00
Tim HeuerGitHubAlexis Abril
 		3fb9f82449 Updating dotnet CI starter workflows (#2333) 
* Update dotnet.yml

Updating versions

* Update dotnet-desktop.yml

Bumping versions

* Update ci/dotnet-desktop.yml

Co-authored-by: Alexis Abril <[email protected]>

---------

Co-authored-by: Alexis Abril <[email protected]>
 2024-03-12 14:08:25 -05:00
Chad BentzandGitHub 03277899f0 tfsec latest v0.1.4 (#2318) 2024-03-06 15:46:46 -06:00
Jamie McCarthyandGitHub f2c131e699 Merge branch 'main' into jm-ci-rubyonrails 2024-03-02 07:08:37 -06:00
Marco GarioGitHubHenry Mercer
 		4a8c4e08b0 Update code-scanning/codeql.yml 
Co-authored-by: Henry Mercer <[email protected]>
 2024-02-19 15:57:02 +01:00
Marco GarioGitHubHenry Mercer
 		8a973982d1 Update code-scanning/codeql.yml 
Co-authored-by: Henry Mercer <[email protected]>
 2024-02-19 15:54:06 +01:00
Marco GarioandGitHub 05e4581159 Update codeql.yml with new build-mode 2024-02-15 09:01:39 +01:00
Jon JanegoandGitHub be552580a6 Merge pull request #2305 from bigdaz/main 
Update for `gradle/[email protected]` release
 2024-02-14 10:03:12 -06:00
daz d303234ad7 Update for gradle/[email protected] release 
- Bump version hashes to use `gradle/actions/[email protected]`
- Bump version hash to use `gradle/actions/[email protected]`
 2024-02-13 14:00:27 -07:00
Jamie McCarthy 4b8ca42dd9 Prefer ruby/setup-ruby@v1 
As recommended in https://github.com/ruby/setup-ruby#setup-ruby
 2024-02-12 06:59:42 -06:00
Jamie McCarthy e4840c47d0 Spell bundle-audit without the r 
Usage as described in https://github.com/rubysec/bundler-audit#readme
 2024-02-12 06:57:18 -06:00
Jamie McCarthy f263f7e886 Run ci/rubyonrails with bundle exec 2024-02-12 06:56:37 -06:00
Sam PartingtonandGitHub 2b5d980659 Merge pull request #2299 from actions/dependency-review-ownership 
Code Scanning shouldn't own `dependency-review.yml`
 2024-02-09 17:37:50 +00:00
Sam PartingtonandGitHub 813dc76266 Merge branch 'main' into dependency-review-ownership 2024-02-09 17:33:22 +00:00
Jon JanegoandGitHub da7a61e43c Merge pull request #2297 from actions/jonjanego-patch-1 
Changing default behavior to include comment summary in PR
 2024-02-07 12:19:42 -06:00
Sam PartingtonandGitHub c4f5db6260 Code Scanning shouldn't own dependency-review.yml 2024-02-07 17:33:08 +00:00
Jon JanegoGitHubChad Bentz
 		8aab15dd49 Update code-scanning/dependency-review.yml 
begone, whitespace

Co-authored-by: Chad Bentz <[email protected]>
 2024-02-07 09:06:01 -06:00
Jon JanegoandGitHub ba9d3788e4 Changing default behavior to include comment summary in PR 
also gave the workflow the appropriate permissions required, pull-requests: write
 2024-02-06 12:55:25 -06:00
SOOS-GSteenandGitHub 6e4aae97ef soos-dast-scan.yml update (#2240) 
* Update soos-dast-scan.yml

* use major version syntax

* code review

* lint

* Update soos-dast-scan.yml
 2024-02-06 10:44:04 -06:00
Jon JanegoandGitHub aecd7f349b Merge pull request #2290 from bigdaz/main 
Update for `gradle/[email protected]` release
 2024-01-31 16:13:33 -06:00
daz 6c7819814a Fix typo 2024-01-31 15:07:12 -07:00
daz 51848d8b15 Remove trailing whitespace 2024-01-31 13:38:44 -07:00
daz b0b88404ff Improve documentation in starter workflow 
- Remove "optional" flag from dependency-submission
- Add example of running without Gradle wrapper
- Link to action docs
 2024-01-31 13:29:02 -07:00
daz 2d30c1b64c Update for gradle/[email protected] release 
- Bump version hashes to use `v3.0.0` of Gradle action
- Bump to Node20-compatible versions of `actions/checkout` and `actions/setup-java`
- Replace uses of `gradle/gradle-build-action` with `gradle/actions/setup-gradle`
- Split "Setup Gradle" step out of "Run Gradle" steps
- Add separate Job using `gradle/actions/dependency-submission` (flagged as optional)
- Bump to setup JDK 17
 2024-01-31 05:34:15 -07:00
Jon JanegoandGitHub 0753b8da50 Merge pull request #2242 from ctcampbell/patch-1 
Update dependency-review.yml actions/checkout version, add common with: options, and add comments for dependency submission
 2024-01-29 14:40:24 -06:00
Jon JanegoandGitHub cea0111003 Update dependency-review.yml 
removing extra whitespace
 2024-01-29 14:38:17 -06:00
Jon JanegoandGitHub c969459da2 Merge branch 'main' into patch-1 2024-01-29 14:34:36 -06:00
James M. GreeneandGitHub 196126a4fc Merge pull request #2288 from actions/pages-cache-v4 
Update all Pages workflows to `actions/cache@v4` for `node20` compliance
 2024-01-29 14:29:10 -06:00
James M. Greene fc7f47d8b0 Update all Pages workflows to actions/cache@v4 for node20 compliance 2024-01-29 14:27:36 -06:00
Cameron BoothandGitHub 170651fcd5 Merge pull request #2287 from actions/jonjanego-patch-1 
Update CODEOWNERS
 2024-01-29 12:26:40 -08:00
Jon JanegoandGitHub 7a5fb795ed Update CODEOWNERS 2024-01-29 14:24:42 -06:00
Jon JanegoandGitHub 1d205de418 Update CODEOWNERS 
adding dependency graph team as an additional codeowner for the /code-scanning/ directory
 2024-01-29 12:24:50 -06:00
Chris CampbellandGitHub e67682c31c Add perms for comment-summary-in-pr 2024-01-29 10:09:37 +00:00
Chris CampbellandGitHub a6ab3d3f95 Update dependency-review.yml 2024-01-29 09:05:18 +00:00
Chris CampbellandGitHub f9970771a8 Update dependency-review-action to v4 2024-01-29 08:47:36 +00:00
Chris Campbell 0d8fa6f490 Add $protected-branches to pull_request target 2024-01-26 09:03:10 +00:00
Chris Campbell 0239269003 Update to match standards in actions/starter-workflows/.../pull_request_template.md 2024-01-26 09:03:10 +00:00