Commit Graph
2428 Commits
Author SHA1 Message Date
Josh Soref 23a568e80a fix(openshift): comment out dangling dependency 2024-04-25 21:32:56 -04:00
Josh Soref 1830845916 Setup-Node: Update all workflows to use Setup-Node V4
* Switch default node version to 20
* Update version set to 18.x, 20.x, 22.x

Signed-off-by: Josh Soref <[email protected]>
2024-04-25 17:42:55 -04:00
Josh Soref a072fdfb1c Labeler: Update to v5 2024-04-25 17:10:59 -04:00
Josh Soref d51dfabea2 Artifacts: Update all workflows to use Artifacts V4
Signed-off-by: Josh Soref <[email protected]>
2024-04-25 16:11:16 -04:00
Josh Soref 545832af8b Setup-Dotnet: Update all workflows to Setup-Dotnet V4 2024-04-25 14:27:37 -04:00
Josh Soref 37d6de723e Setup-Java: Update all workflows to use Setup-Java V4
Signed-off-by: Josh Soref <[email protected]>
2024-04-25 14:15:25 -04:00
dependabot[bot]andGitHub b81d5bf895 Bump actions/cache from 3 to 4
Bumps [actions/cache](https://github.com/actions/cache) from 3 to 4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
2024-04-25 16:53:16 +00:00
Dan RigbyandGitHub 2435e57601 Merge pull request #2270 from jsoref/bump-actions
Checkout: Update all workflows to use Checkout V4
2024-04-25 12:52:18 -04:00
Dan RigbyandGitHub 8ff5c7e7bb Merge branch 'main' into bump-actions 2024-04-25 12:51:52 -04:00
Fabian Aguilar GomezandGitHub 29b0a3e3a9 Update settings.json 2024-04-19 16:30:57 -05:00
Fabian Aguilar GomezandGitHub 7e9ab60c5f remove pages for now 2024-04-19 16:26:10 -05:00
mponawsandGitHub ac9c407320 Add starter-workflows for Policy Validator (#2375)
* Add starter-workflows for Policy Validator

* Add starter-workflows for Policy Validator

* Add starter-workflows for Policy Validator, removed references to GitHub secrets & S3 to keep it simple
2024-04-18 14:39:17 -05:00
Marco GarioandGitHub 9963e8cd28 Merge pull request #2372 from actions/codeql-packages-read
Update CodeQL workflow to use packages:read permission.
2024-04-11 13:17:21 +02:00
Marco GarioandAnders Starcke Henriksen a3194f5b47 Update CodeQL workflow to use packages:read permission.
Co-authored-by: Anders Starcke Henriksen <[email protected]>
2024-04-11 09:42:21 +02:00
ca5bcdc693 Add OSV-Scanner code scanning workflow (#2350)
* Add OSV-Scanner code scanning workflow

* Update code-scanning/osv-scanner.yml

Co-authored-by: Alexis Abril <[email protected]>

---------

Co-authored-by: Alexis Abril <[email protected]>
2024-04-09 22:21:33 -05:00
Josh Soref cd4b67d0b4 Checkout: Update all workflows to use Checkout V4 2024-04-05 15:29:37 -04:00
Issy LongandGitHub 607f368fb0 Merge pull request #2363 from actions/larger-runners-not-ghes
codeql: Clarify that hosted larger runners only exist on GHEC
2024-04-03 16:22:33 +01:00
Issy LongandGitHub 31a3e00dab codeql: Clarify that hosted larger runners only exist on GHEC
- Part of https://github.com/github/code-scanning/issues/13748.
2024-04-03 10:23:11 +01:00
b53d05e4b0 ci: use artisan command to run test, because this ci/laravel.yml does not work properly in laravel when uses Pest instead of PHPUnit (#2284)
Co-authored-by: Alexis Abril <[email protected]>
2024-04-01 15:12:02 -05:00
efd31e5f0f update soos dash action commit hash / sarif action version / logo (#2317)
* Update soos-dast-scan.yml

* Update soos-dast-scan.yml

* Update soos.svg

* Update code-scanning/soos-dast-scan.yml

Co-authored-by: Alexis Abril <[email protected]>

---------

Co-authored-by: Alexis Abril <[email protected]>
2024-04-01 15:11:05 -05:00
James M. Greene e4837fa768 Improve step name for Next.js build 2024-03-29 20:19:38 -05:00
James M. GreeneandGitHub eeef7a773c Merge pull request #2360 from actions/configure-pages-v5
Update all Pages workflows to use `actions/configure-pages@v5`
2024-03-29 20:09:51 -05:00
James M. Greene c9a0122a59 Update all Pages workflows to use actions/configure-pages@v5 2024-03-29 19:57:20 -05:00
Cameron BoothandGitHub e6175cb011 Merge pull request #2359 from actions/alexisabril-patch-1
Update CODEOWNERS
2024-03-29 15:32:18 -07:00
Alexis AbrilandGitHub 87efe4c91d Update CODEOWNERS
Adding @actions/starter-workflows to each category to minimize notification pollution.
2024-03-29 15:20:42 -07:00
Alexis AbrilandGitHub 4ca845b387 Update CODEOWNERS
Simplifying the CODEOWNERS file to allow respective teams the capabilities to manage PRs as responsibilities have been updated recently. In the short term, this will add notifications to folks for each team.
2024-03-29 13:23:28 -07:00
James M. GreeneandGitHub 539cde590c Merge pull request #2351 from cclinet/update-astro-for-yarn
Fix: astro.yml for yarn based project
2024-03-27 22:40:13 -05:00
James M. GreeneandGitHub 0ac8e61930 Merge branch 'main' into update-astro-for-yarn 2024-03-27 22:39:47 -05:00
4620c76b38 update Scorecard Action hashes and version comments (#2348)
* update action hashes and version comments

ossf/scorecard-action v2.1.2 is old and doesnt work after a Sigstore
change. https://blog.sigstore.dev/tuf-root-update/

Signed-off-by: Spencer Schrock <[email protected]>

* downgrade actions/upload-artifact to node20 version of v3

dependabot will suggest upgrade to v4.3.1 for repos that can upgrade.
note: v3.pre.node20 is how dependabot refers to the pinned hash, so
use that so it can upgrade the comment

Signed-off-by: Spencer Schrock <[email protected]>

* upgrade github/codeql-action/upload-sarif to v3.24.9

Signed-off-by: Spencer Schrock <[email protected]>

---------

Signed-off-by: Spencer Schrock <[email protected]>
Co-authored-by: Alexis Abril <[email protected]>
2024-03-27 13:25:03 -07:00
Andreas DeiningerandGitHub 831e9cb8e4 Bump workflow actions of various starter files (#2210) 2024-03-27 10:51:41 -07:00
Marco GarioandGitHub 4ccc742286 Merge pull request #2306 from actions/update_codeql_template
Code Scanning Update codeql.yml with new build-mode
2024-03-26 14:13:08 +01:00
Marco Gario fdbad9c74f Update codeql.yml
links to docs
2024-03-26 13:45:32 +01:00
Marco GarioandGitHub 97c6254b5e Merge branch 'main' into update_codeql_template 2024-03-26 13:35:12 +01:00
Marco GarioandGitHub aad9272438 Update codeql.yml
Limit matrix information in the job name to language by default
2024-03-26 13:18:17 +01:00
61cdce264d Updating nextjs.yml for Next.js 14 Support (#2204)
* Update nextjs.yml

* Update nextjs.yml

---------

Co-authored-by: Alexis Abril <[email protected]>
2024-03-25 16:26:55 -07:00
cclinandGitHub 0f4d22325b Update astro.yml for yarn based project 2024-03-25 16:05:58 +08:00
William Woodruff e44c7b519f python-publish: environment
Signed-off-by: William Woodruff <[email protected]>
2024-03-19 16:57:58 -04:00
William Woodruff 1fa8e18350 python-publish: copy gem-push.yml's pattern
Signed-off-by: William Woodruff <[email protected]>
2024-03-19 16:49:45 -04:00
William Woodruff e230215292 python-publish: explanatory comment
Signed-off-by: William Woodruff <[email protected]>
2024-03-19 16:42:35 -04:00
William Woodruff 231e6b5f6f python-publish: contents: read at toplevel
Signed-off-by: William Woodruff <[email protected]>
2024-03-19 16:41:37 -04:00
f4c64fb836 Apply suggestions from code review
Co-authored-by: Sviatoslav Sydorenko (Святослав Сидоренко) <[email protected]>
2024-03-19 15:40:07 -04:00
William Woodruff 469c22e7a4 ci/python-publish: bump, use trusted publishing
Signed-off-by: William Woodruff <[email protected]>
2024-03-19 12:45:34 -04:00
3fb9f82449 Updating dotnet CI starter workflows (#2333)
* Update dotnet.yml

Updating versions

* Update dotnet-desktop.yml

Bumping versions

* Update ci/dotnet-desktop.yml

Co-authored-by: Alexis Abril <[email protected]>

---------

Co-authored-by: Alexis Abril <[email protected]>
2024-03-12 14:08:25 -05:00
Chad BentzandGitHub 03277899f0 tfsec latest v0.1.4 (#2318) 2024-03-06 15:46:46 -06:00
Jamie McCarthyandGitHub f2c131e699 Merge branch 'main' into jm-ci-rubyonrails 2024-03-02 07:08:37 -06:00
4a8c4e08b0 Update code-scanning/codeql.yml
Co-authored-by: Henry Mercer <[email protected]>
2024-02-19 15:57:02 +01:00
8a973982d1 Update code-scanning/codeql.yml
Co-authored-by: Henry Mercer <[email protected]>
2024-02-19 15:54:06 +01:00
Marco GarioandGitHub 05e4581159 Update codeql.yml with new build-mode 2024-02-15 09:01:39 +01:00
Jon JanegoandGitHub be552580a6 Merge pull request #2305 from bigdaz/main
Update for `gradle/[email protected]` release
2024-02-14 10:03:12 -06:00
daz d303234ad7 Update for gradle/[email protected] release
- Bump version hashes to use `gradle/actions/[email protected]`
- Bump version hash to use `gradle/actions/[email protected]`
2024-02-13 14:00:27 -07:00