actions/starter-workflows
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,204 Commits 26 Branches 0 Tags
a3194f5b4757a7bfb2324b17ccf11e28df2bc4f9
Commit Graph
2204 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Marco GarioandAnders Starcke Henriksen a3194f5b47 Update CodeQL workflow to use packages:read permission. 
Co-authored-by: Anders Starcke Henriksen <[email protected]>
 2024-04-11 09:42:21 +02:00
Rex PGitHubAlexis Abril
 		ca5bcdc693 Add OSV-Scanner code scanning workflow (#2350) 
* Add OSV-Scanner code scanning workflow

* Update code-scanning/osv-scanner.yml

Co-authored-by: Alexis Abril <[email protected]>

---------

Co-authored-by: Alexis Abril <[email protected]>
 2024-04-09 22:21:33 -05:00
Issy LongandGitHub 607f368fb0 Merge pull request #2363 from actions/larger-runners-not-ghes 
codeql: Clarify that hosted larger runners only exist on GHEC
 2024-04-03 16:22:33 +01:00
Issy LongandGitHub 31a3e00dab codeql: Clarify that hosted larger runners only exist on GHEC 
- Part of https://github.com/github/code-scanning/issues/13748.
 2024-04-03 10:23:11 +01:00
Charly GarciaGitHubAlexis Abril
 		b53d05e4b0 ci: use artisan command to run test, because this ci/laravel.yml does not work properly in laravel when uses Pest instead of PHPUnit (#2284) 
Co-authored-by: Alexis Abril <[email protected]>
 2024-04-01 15:12:02 -05:00
SOOS-GSteenGitHubAlexis Abril
 		efd31e5f0f update soos dash action commit hash / sarif action version / logo (#2317) 
* Update soos-dast-scan.yml

* Update soos-dast-scan.yml

* Update soos.svg

* Update code-scanning/soos-dast-scan.yml

Co-authored-by: Alexis Abril <[email protected]>

---------

Co-authored-by: Alexis Abril <[email protected]>
 2024-04-01 15:11:05 -05:00
James M. Greene e4837fa768 Improve step name for Next.js build 2024-03-29 20:19:38 -05:00
James M. GreeneandGitHub eeef7a773c Merge pull request #2360 from actions/configure-pages-v5 
Update all Pages workflows to use `actions/configure-pages@v5`
 2024-03-29 20:09:51 -05:00
James M. Greene c9a0122a59 Update all Pages workflows to use actions/configure-pages@v5 2024-03-29 19:57:20 -05:00
Cameron BoothandGitHub e6175cb011 Merge pull request #2359 from actions/alexisabril-patch-1 
Update CODEOWNERS
 2024-03-29 15:32:18 -07:00
Alexis AbrilandGitHub 87efe4c91d Update CODEOWNERS 
Adding @actions/starter-workflows to each category to minimize notification pollution.
 2024-03-29 15:20:42 -07:00
Alexis AbrilandGitHub 4ca845b387 Update CODEOWNERS 
Simplifying the CODEOWNERS file to allow respective teams the capabilities to manage PRs as responsibilities have been updated recently. In the short term, this will add notifications to folks for each team.
 2024-03-29 13:23:28 -07:00
James M. GreeneandGitHub 539cde590c Merge pull request #2351 from cclinet/update-astro-for-yarn 
Fix: astro.yml for yarn based project
 2024-03-27 22:40:13 -05:00
James M. GreeneandGitHub 0ac8e61930 Merge branch 'main' into update-astro-for-yarn 2024-03-27 22:39:47 -05:00
Spencer SchrockGitHubAlexis Abril
 		4620c76b38 update Scorecard Action hashes and version comments (#2348) 
* update action hashes and version comments

ossf/scorecard-action v2.1.2 is old and doesnt work after a Sigstore
change. https://blog.sigstore.dev/tuf-root-update/

Signed-off-by: Spencer Schrock <[email protected]>

* downgrade actions/upload-artifact to node20 version of v3

dependabot will suggest upgrade to v4.3.1 for repos that can upgrade.
note: v3.pre.node20 is how dependabot refers to the pinned hash, so
use that so it can upgrade the comment

Signed-off-by: Spencer Schrock <[email protected]>

* upgrade github/codeql-action/upload-sarif to v3.24.9

Signed-off-by: Spencer Schrock <[email protected]>

---------

Signed-off-by: Spencer Schrock <[email protected]>
Co-authored-by: Alexis Abril <[email protected]>
 2024-03-27 13:25:03 -07:00
Andreas DeiningerandGitHub 831e9cb8e4 Bump workflow actions of various starter files (#2210) 2024-03-27 10:51:41 -07:00
Marco GarioandGitHub 4ccc742286 Merge pull request #2306 from actions/update_codeql_template 
Code Scanning Update codeql.yml with new build-mode
 2024-03-26 14:13:08 +01:00
Marco Gario fdbad9c74f Update codeql.yml 
links to docs
 2024-03-26 13:45:32 +01:00
Marco GarioandGitHub 97c6254b5e Merge branch 'main' into update_codeql_template 2024-03-26 13:35:12 +01:00
Marco GarioandGitHub aad9272438 Update codeql.yml 
Limit matrix information in the job name to language by default
 2024-03-26 13:18:17 +01:00
카기자판GitHubAlexis Abril
 		61cdce264d Updating nextjs.yml for Next.js 14 Support (#2204) 
* Update nextjs.yml

* Update nextjs.yml

---------

Co-authored-by: Alexis Abril <[email protected]>
 2024-03-25 16:26:55 -07:00
cclinandGitHub 0f4d22325b Update astro.yml for yarn based project 2024-03-25 16:05:58 +08:00
Tim HeuerGitHubAlexis Abril
 		3fb9f82449 Updating dotnet CI starter workflows (#2333) 
* Update dotnet.yml

Updating versions

* Update dotnet-desktop.yml

Bumping versions

* Update ci/dotnet-desktop.yml

Co-authored-by: Alexis Abril <[email protected]>

---------

Co-authored-by: Alexis Abril <[email protected]>
 2024-03-12 14:08:25 -05:00
Chad BentzandGitHub 03277899f0 tfsec latest v0.1.4 (#2318) 2024-03-06 15:46:46 -06:00
Marco GarioGitHubHenry Mercer
 		4a8c4e08b0 Update code-scanning/codeql.yml 
Co-authored-by: Henry Mercer <[email protected]>
 2024-02-19 15:57:02 +01:00
Marco GarioGitHubHenry Mercer
 		8a973982d1 Update code-scanning/codeql.yml 
Co-authored-by: Henry Mercer <[email protected]>
 2024-02-19 15:54:06 +01:00
Marco GarioandGitHub 05e4581159 Update codeql.yml with new build-mode 2024-02-15 09:01:39 +01:00
Jon JanegoandGitHub be552580a6 Merge pull request #2305 from bigdaz/main 
Update for `gradle/[email protected]` release
 2024-02-14 10:03:12 -06:00
daz d303234ad7 Update for gradle/[email protected] release 
- Bump version hashes to use `gradle/actions/[email protected]`
- Bump version hash to use `gradle/actions/[email protected]`
 2024-02-13 14:00:27 -07:00
Sam PartingtonandGitHub 2b5d980659 Merge pull request #2299 from actions/dependency-review-ownership 
Code Scanning shouldn't own `dependency-review.yml`
 2024-02-09 17:37:50 +00:00
Sam PartingtonandGitHub 813dc76266 Merge branch 'main' into dependency-review-ownership 2024-02-09 17:33:22 +00:00
Jon JanegoandGitHub da7a61e43c Merge pull request #2297 from actions/jonjanego-patch-1 
Changing default behavior to include comment summary in PR
 2024-02-07 12:19:42 -06:00
Sam PartingtonandGitHub c4f5db6260 Code Scanning shouldn't own dependency-review.yml 2024-02-07 17:33:08 +00:00
Jon JanegoGitHubChad Bentz
 		8aab15dd49 Update code-scanning/dependency-review.yml 
begone, whitespace

Co-authored-by: Chad Bentz <[email protected]>
 2024-02-07 09:06:01 -06:00
Jon JanegoandGitHub ba9d3788e4 Changing default behavior to include comment summary in PR 
also gave the workflow the appropriate permissions required, pull-requests: write
 2024-02-06 12:55:25 -06:00
SOOS-GSteenandGitHub 6e4aae97ef soos-dast-scan.yml update (#2240) 
* Update soos-dast-scan.yml

* use major version syntax

* code review

* lint

* Update soos-dast-scan.yml
 2024-02-06 10:44:04 -06:00
Jon JanegoandGitHub aecd7f349b Merge pull request #2290 from bigdaz/main 
Update for `gradle/[email protected]` release
 2024-01-31 16:13:33 -06:00
daz 6c7819814a Fix typo 2024-01-31 15:07:12 -07:00
daz 51848d8b15 Remove trailing whitespace 2024-01-31 13:38:44 -07:00
daz b0b88404ff Improve documentation in starter workflow 
- Remove "optional" flag from dependency-submission
- Add example of running without Gradle wrapper
- Link to action docs
 2024-01-31 13:29:02 -07:00
daz 2d30c1b64c Update for gradle/[email protected] release 
- Bump version hashes to use `v3.0.0` of Gradle action
- Bump to Node20-compatible versions of `actions/checkout` and `actions/setup-java`
- Replace uses of `gradle/gradle-build-action` with `gradle/actions/setup-gradle`
- Split "Setup Gradle" step out of "Run Gradle" steps
- Add separate Job using `gradle/actions/dependency-submission` (flagged as optional)
- Bump to setup JDK 17
 2024-01-31 05:34:15 -07:00
Jon JanegoandGitHub 0753b8da50 Merge pull request #2242 from ctcampbell/patch-1 
Update dependency-review.yml actions/checkout version, add common with: options, and add comments for dependency submission
 2024-01-29 14:40:24 -06:00
Jon JanegoandGitHub cea0111003 Update dependency-review.yml 
removing extra whitespace
 2024-01-29 14:38:17 -06:00
Jon JanegoandGitHub c969459da2 Merge branch 'main' into patch-1 2024-01-29 14:34:36 -06:00
James M. GreeneandGitHub 196126a4fc Merge pull request #2288 from actions/pages-cache-v4 
Update all Pages workflows to `actions/cache@v4` for `node20` compliance
 2024-01-29 14:29:10 -06:00
James M. Greene fc7f47d8b0 Update all Pages workflows to actions/cache@v4 for node20 compliance 2024-01-29 14:27:36 -06:00
Cameron BoothandGitHub 170651fcd5 Merge pull request #2287 from actions/jonjanego-patch-1 
Update CODEOWNERS
 2024-01-29 12:26:40 -08:00
Jon JanegoandGitHub 7a5fb795ed Update CODEOWNERS 2024-01-29 14:24:42 -06:00
Jon JanegoandGitHub 1d205de418 Update CODEOWNERS 
adding dependency graph team as an additional codeowner for the /code-scanning/ directory
 2024-01-29 12:24:50 -06:00
Chris CampbellandGitHub e67682c31c Add perms for comment-summary-in-pr 2024-01-29 10:09:37 +00:00