588f02dade
Switch java distribution from 'adopt' to 'temurin' ( #1065 )
...
adopt is rebranded into temurin
see https://blog.adoptopenjdk.net/2021/03/transition-to-eclipse-an-update/
2022-01-14 18:05:31 -05:00
e873c3ca45
Merge pull request #1345 from laurentsimon/feat/scorecard-release
...
Scorecards: Updates for release
2022-01-14 12:15:31 +00:00
1b10c28ff4
rem tabs and update comment
2022-01-14 03:00:11 +00:00
aa643dfa0c
bump hash
2022-01-13 22:29:39 +00:00
f78e23c19d
Update trivy.yml
2022-01-13 11:12:14 +05:30
b0f310cefc
update token name
2022-01-10 23:52:58 +00:00
00e08539ca
prepare release
2022-01-10 23:19:46 +00:00
f42f92e60c
Update erlang.yml
...
Add token permissions
2022-01-05 09:50:26 -08:00
51e7c8e1e6
Merge pull request #1302 from laurentsimon/feat/scorecard
...
Add scorecards config
2022-01-04 19:16:50 +00:00
d0dba5262b
use v0.0.1
2022-01-04 18:26:32 +00:00
b73f59a3e8
add icon
2022-01-04 18:26:32 +00:00
40772919fb
updates
2022-01-04 18:26:32 +00:00
7c57e8a703
updates
2022-01-04 18:26:32 +00:00
07be376c3a
updates
2022-01-04 18:26:32 +00:00
48edda6aca
reduce text
2022-01-04 18:26:32 +00:00
f38127b062
update text
2022-01-04 18:26:32 +00:00
9e49744dc2
url
2022-01-04 18:26:32 +00:00
a894da71d1
pin actions
2022-01-04 18:26:32 +00:00
a00db4437c
comments
2022-01-04 18:26:32 +00:00
0e50194de8
use hash
2022-01-04 18:26:32 +00:00
794e910e12
add scorecards config
2022-01-04 18:26:32 +00:00
f9d17c0062
Merge pull request #1332 from DhavalPatelPersistent/main
...
Update checkmarx.yml attributes : "uses","project","teams","scanners","params".
2021-12-30 04:17:00 -08:00
97020d0adc
Update checkmarx.yml
...
Point to SHA instead for master
2021-12-30 16:39:28 +05:30
0b45ddae0d
Update / Add "uses","project","teams","scanners","params" attributes.
2021-12-24 15:55:11 +05:30
5104ac4274
Merge pull request #1324 from adangel/update-pmd
...
Update pmd to v1.1.0
2021-12-20 15:16:34 +00:00
615c63babc
Update pmd to v1.1.0
...
Use pmd/pmd-github-action@6d98898be0 which is v1.1.0
Use temurin as java distribution
2021-12-20 11:50:23 +01:00
619bd129a7
Merge pull request #1314 from actions/partner_templates
...
Merge partner templates to main branch
2021-12-17 22:11:22 +05:30
7eb13f680a
Merge branch 'main' of https://github.com/actions/starter-workflows into partner_templates
2021-12-16 10:55:26 +00:00
73a17a51b5
deleting azure.yml
2021-12-16 10:55:17 +00:00
00db25fc1e
Enable keyless signing for private repos. ( #1295 )
...
Now that cosign 1.4 is out, we can perform keyless signing without panicking on private images (and without `--force` uploading to Rekor).
Signed-off-by: Matt Moore <mattmoor@chainguard.dev >
2021-12-13 15:17:02 -05:00
5bd8eb4344
Merge branch 'main' of https://github.com/actions/starter-workflows into partner_templates
2021-12-09 11:32:59 +00:00
9c27271e2f
Merge pull request #1298 from actions/anuragc617/fix_az_order
...
Renaming azure template to fix the order
2021-12-08 12:48:11 +05:30
17c64f97fe
resolving comments
2021-12-08 05:01:06 +00:00
c059d06679
renaming azure template to fix the order
2021-12-07 14:16:20 +00:00
432e3e3e74
Merge pull request #1278 from actions/veracode_workflow
...
Add veracode workflow
2021-12-07 11:52:25 +01:00
75ecfa0bae
Merge branch 'main' into veracode_workflow
2021-12-07 11:50:58 +01:00
1c56988c5d
remove unnecessary uses of the upload-artifact action and improve input file name
2021-12-07 11:35:26 +01:00
60d206d090
Have the starter docker-publish action sign digests. ( #1255 )
...
* Have the starter `docker-publish` action sign digests.
This change installs `sigstore/cosign` using the `cosign-installer` action,
and uses sigstore's "keyless" signing process to sign the resulting image
digest using the action's identity token (see: `id-token: write`).
Signed-off-by: Matt Moore <mattomata@gmail.com >
* Fully qualify the digest, add setup-buildx-action as workaround
* Drop --force, add public repo check
* Use built-in 'private' bit
2021-12-06 22:35:19 +05:30
d67515a20c
Merge pull request #1200 from abirismyname/adding-pmd-workflow
...
Adding pmd
2021-12-03 18:42:12 +00:00
4e6641ed74
Updating pmd logo
2021-12-03 13:19:43 -05:00
f46fcd0e80
Merge branch 'main' into adding-pmd-workflow
2021-12-03 16:13:55 +00:00
649bca8dab
Updating logo and adding sha to workflow
2021-12-03 10:33:18 -05:00
f7b1f1515d
Use gradle-build-action in starter workflows ( #1237 )
...
The `gradle-build-action` provides enhanced execution and caching functionality for Gradle.
This change updates starter workflows to use `v2.0.0` of `gradle-build-action`.
Improvements over invoking Gradle directly include:
- Easier to run the workflow with a particular Gradle version
- More sophisticated and more efficient caching of Gradle User Home between invocations
- Detailed reporting of cache usage and cache configuration options
- Automatic capture of Build Scan links
Co-authored-by: Josh Gross <joshmgross@github.com >
2021-12-02 17:22:55 -05:00
2863ef2206
Merge branch 'main' into adding-pmd-workflow
2021-12-02 08:46:08 -05:00
9920cac8e9
Update text flow for cmake comment ( #1054 )
2021-12-02 09:21:29 +05:30
a48ef3a643
Update azure-webapps-node.yml ( #1282 )
2021-12-01 20:52:36 -05:00
435b265ae0
Removing dupe
2021-12-01 17:02:40 -05:00
3fd42f21fc
Merge branch 'main' into adding-pmd-workflow
2021-12-01 16:05:16 -05:00
d2bba6f2d9
Adding icon
2021-12-01 16:03:49 -05:00
ce771c75d8
Referencing new official PMD github action
2021-12-01 15:50:22 -05:00
Manuel