actions/starter-workflows
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,238 Commits 26 Branches 0 Tags
de925c96d94d3e63cbeb7ff809d8ec64fc331c3b
Commit Graph

2238 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
yahavi de925c96d9 Frogbot: Update to 2.21.0 2024-06-01 18:58:42 +03:00
Felipe Suero c2f413dda8 Merge pull request #2414 from actions/docker-patch 
Update cosign versions in Docker-publish
 2024-05-30 12:42:09 -04:00
Justin Hutchings 61d42c9d0c Update cosign versions 2024-05-30 09:34:08 -07:00
Konrad Pabjan 7ce8d3209a Merge pull request #2403 from cory-miller/main 
Fix typo in grade starter workflow
 2024-05-23 17:48:39 -04:00
Cory Miller 39131434ed Fix typo in grade starter workflow 2024-05-22 10:25:41 -04:00
Marco Gario e83edef5d8 Merge pull request #2392 from felickz/patch-5 
CodeQL - Specify bash shell so that it doesn't fail if switching to 'windows`
 2024-05-13 11:29:25 +02:00
Marco Gario 899b09ba54 Merge branch 'main' into patch-5 2024-05-13 11:29:02 +02:00
Dylan 6702f0d2e3 Fortify Starter Workflow to use new Fortify AST Action (#2245) 
* Update Fortify logo

* Update fortify workflow

Update positioning, Github action versions, Java version and add in Debricked packaging support

* Update fortify.properties.json

Update languages and creator

* Update fortify.yml

Update triggers based on latest starter workflow guidelines

* Update code-scanning/fortify.yml

Co-authored-by: James M. Greene <JamesMGreene@github.com>

* Update code-scanning/fortify.yml

Co-authored-by: James M. Greene <JamesMGreene@github.com>

* Update code-scanning/properties/fortify.properties.json

Co-authored-by: James M. Greene <JamesMGreene@github.com>

* Update code-scanning/fortify.yml

Co-authored-by: James M. Greene <JamesMGreene@github.com>

* Update code-scanning/fortify.yml

Co-authored-by: James M. Greene <JamesMGreene@github.com>

* Update code-scanning/fortify.yml

Co-authored-by: James M. Greene <JamesMGreene@github.com>

* Update fortify.yml

* Update fortify.properties.json

* Update fortify.yml

Update starter workflow to use new unified Fortify AST Action

* Update fortify.yml

* Update fortify.yml

* Update fortify.yml

Refine workflow comments

* Update fortify.yml

Bump checkout action version

* Update fortify.yml

* Update fortify.yml

* Update fortify.yml

One final clean up

* Update fortify.properties.json

* Update fortify.yml

* Update fortify.yml

* Update fortify.properties.json

Update with support for Bicep and Solidity

* Update fortify.properties.json

Uppercase "Solidity" for consistency

* Change v1 to commit hash

---------

Co-authored-by: James M. Greene <JamesMGreene@github.com>
Co-authored-by: Ruud Senden <8635138+rsenden@users.noreply.github.com>
 2024-05-06 13:57:14 +00:00
Chad Bentz b30fbdf5f2 Specify bash shell so that it doesn't fail if switching to 'windows` 2024-05-02 10:59:15 -04:00
Yoann Chaudet 9b485d4f8a Merge pull request #2388 from actions/readonly-sync 
Add the concept of a "read-only" synced folder
 2024-04-29 14:44:06 -07:00
Yoann Chaudet 2c3a9cab03 Update script/sync-ghes/index.ts 2024-04-29 13:46:23 -07:00
Yoann Chaudet dd92d3760d wip 2024-04-29 13:43:22 -07:00
Yoann Chaudet 0073136905 wip 2024-04-29 13:40:32 -07:00
Yoann Chaudet 9f6e4a9e7d wip 2024-04-29 13:38:43 -07:00
Yoann Chaudet 3fa8d369da async 2024-04-29 13:37:57 -07:00
Yoann Chaudet ddca0a9327 async 2024-04-29 13:33:45 -07:00
Yoann Chaudet 66e7ed44ca wip 2024-04-29 13:31:34 -07:00
Yoann Chaudet 138375ba29 wip 2024-04-29 13:30:15 -07:00
Yoann Chaudet 1e15901e1c wip 2024-04-29 13:20:27 -07:00
Yoann Chaudet 252e935e86 ghes 2024-04-29 13:17:24 -07:00
Yoann Chaudet c7480532d0 again 2024-04-29 13:16:50 -07:00
Yoann Chaudet 264962401d ici 2024-04-29 13:03:21 -07:00
Yoann Chaudet 79af930b77 Merge pull request #2376 from actions/tsusdere-patch-1 
Remove Pages starter workflows from the sync automation
 2024-04-29 12:05:15 -07:00
Yoann Chaudet 15066a3fd2 Merge branch 'main' into tsusdere-patch-1 2024-04-29 11:58:54 -07:00
Yoann Chaudet 7d07997513 Update script/sync-ghes/settings.json 2024-04-29 11:57:05 -07:00
Yoann Chaudet d526113a1b Update script/sync-ghes/settings.json 2024-04-29 11:56:46 -07:00
Yoann Chaudet 5902ad751b Update script/sync-ghes/settings.json 2024-04-29 11:56:18 -07:00
Dan Rigby 2435e57601 Merge pull request #2270 from jsoref/bump-actions 
Checkout: Update all workflows to use Checkout V4
 2024-04-25 12:52:18 -04:00
Dan Rigby 8ff5c7e7bb Merge branch 'main' into bump-actions 2024-04-25 12:51:52 -04:00
Fabian Aguilar Gomez 29b0a3e3a9 Update settings.json 2024-04-19 16:30:57 -05:00
Fabian Aguilar Gomez 7e9ab60c5f remove pages for now 2024-04-19 16:26:10 -05:00
mponaws ac9c407320 Add starter-workflows for Policy Validator (#2375) 
* Add starter-workflows for Policy Validator

* Add starter-workflows for Policy Validator

* Add starter-workflows for Policy Validator, removed references to GitHub secrets & S3 to keep it simple
 2024-04-18 14:39:17 -05:00
Marco Gario 9963e8cd28 Merge pull request #2372 from actions/codeql-packages-read 
Update CodeQL workflow to use packages:read permission.
 2024-04-11 13:17:21 +02:00
Marco Gario a3194f5b47 Update CodeQL workflow to use packages:read permission. 
Co-authored-by: Anders Starcke Henriksen <starcke@github.com>
 2024-04-11 09:42:21 +02:00
Rex P ca5bcdc693 Add OSV-Scanner code scanning workflow (#2350) 
* Add OSV-Scanner code scanning workflow

* Update code-scanning/osv-scanner.yml

Co-authored-by: Alexis Abril <alexisabril@github.com>

---------

Co-authored-by: Alexis Abril <alexisabril@github.com>
 2024-04-09 22:21:33 -05:00
Josh Soref cd4b67d0b4 Checkout: Update all workflows to use Checkout V4 2024-04-05 15:29:37 -04:00
Issy Long 607f368fb0 Merge pull request #2363 from actions/larger-runners-not-ghes 
codeql: Clarify that hosted larger runners only exist on GHEC
 2024-04-03 16:22:33 +01:00
Issy Long 31a3e00dab codeql: Clarify that hosted larger runners only exist on GHEC 
- Part of https://github.com/github/code-scanning/issues/13748.
 2024-04-03 10:23:11 +01:00
Charly Garcia b53d05e4b0 ci: use artisan command to run test, because this ci/laravel.yml does not work properly in laravel when uses Pest instead of PHPUnit (#2284) 
Co-authored-by: Alexis Abril <alexisabril@github.com>
 2024-04-01 15:12:02 -05:00
SOOS-GSteen efd31e5f0f update soos dash action commit hash / sarif action version / logo (#2317) 
* Update soos-dast-scan.yml

* Update soos-dast-scan.yml

* Update soos.svg

* Update code-scanning/soos-dast-scan.yml

Co-authored-by: Alexis Abril <alexisabril@github.com>

---------

Co-authored-by: Alexis Abril <alexisabril@github.com>
 2024-04-01 15:11:05 -05:00
James M. Greene e4837fa768 Improve step name for Next.js build 2024-03-29 20:19:38 -05:00
James M. Greene eeef7a773c Merge pull request #2360 from actions/configure-pages-v5 
Update all Pages workflows to use `actions/configure-pages@v5`
 2024-03-29 20:09:51 -05:00
James M. Greene c9a0122a59 Update all Pages workflows to use actions/configure-pages@v5 2024-03-29 19:57:20 -05:00
Cameron Booth e6175cb011 Merge pull request #2359 from actions/alexisabril-patch-1 
Update CODEOWNERS
 2024-03-29 15:32:18 -07:00
Alexis Abril 87efe4c91d Update CODEOWNERS 
Adding @actions/starter-workflows to each category to minimize notification pollution.
 2024-03-29 15:20:42 -07:00
Alexis Abril 4ca845b387 Update CODEOWNERS 
Simplifying the CODEOWNERS file to allow respective teams the capabilities to manage PRs as responsibilities have been updated recently. In the short term, this will add notifications to folks for each team.
 2024-03-29 13:23:28 -07:00
James M. Greene 539cde590c Merge pull request #2351 from cclinet/update-astro-for-yarn 
Fix: astro.yml for yarn based project
 2024-03-27 22:40:13 -05:00
James M. Greene 0ac8e61930 Merge branch 'main' into update-astro-for-yarn 2024-03-27 22:39:47 -05:00
Spencer Schrock 4620c76b38 update Scorecard Action hashes and version comments (#2348) 
* update action hashes and version comments

ossf/scorecard-action v2.1.2 is old and doesnt work after a Sigstore
change. https://blog.sigstore.dev/tuf-root-update/

Signed-off-by: Spencer Schrock <sschrock@google.com>

* downgrade actions/upload-artifact to node20 version of v3

dependabot will suggest upgrade to v4.3.1 for repos that can upgrade.
note: v3.pre.node20 is how dependabot refers to the pinned hash, so
use that so it can upgrade the comment

Signed-off-by: Spencer Schrock <sschrock@google.com>

* upgrade github/codeql-action/upload-sarif to v3.24.9

Signed-off-by: Spencer Schrock <sschrock@google.com>

---------

Signed-off-by: Spencer Schrock <sschrock@google.com>
Co-authored-by: Alexis Abril <alexisabril@github.com>
 2024-03-27 13:25:03 -07:00
Andreas Deininger 831e9cb8e4 Bump workflow actions of various starter files (#2210) 2024-03-27 10:51:41 -07:00