Files

T

Aditya Sharad b015c848b6 CodeQL: Reduce job timeout to 2h if the target language is Swift

Some projects observed intermittent build timeouts with Swift.
In case this happens, and our CodeQL-level mitigations do not prevent the problem, we want to avoid using up 6h of the customer's billed macOS Actions minutes (which is the default timeout), so we suggest a reduced timeout of 2h.

This value is chosen to accommodate the total job time (build + CodeQL extraction + CodeQL analysis) we expect for large Swift projects. We may choose to adjust it in future.

2023-05-22 10:10:15 -07:00

properties

Addition of snyk-security workflow to enable the Snyk platform from a single GitHub Action (#1939 )

2023-03-07 16:22:52 +05:30

anchore-syft.yml

Add Anchore Syft SBOM scan workflow

2022-08-16 12:47:02 -04:00

anchore.yml

Update Anchore Grype scan action workflow

2022-09-26 10:33:41 -04:00

apisec-scan.yml

Update apisec-scan.yml (#1898 )

2023-03-04 18:12:33 +05:30

bandit.yml

Try to fix lint error (#1914 )

2023-01-23 11:10:50 +05:30

brakeman.yml

Update ruby/setup-ruby for CVE-2023-28755 and CVE-2023-28756

2023-04-04 14:26:08 -07:00

checkmarx-one.yml

Fix whitespace lint

2022-11-30 10:21:45 +00:00

checkmarx.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

clj-holmes.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

clj-watson.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

cloudrail.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

codacy.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

codeql.yml

CodeQL: Reduce job timeout to 2h if the target language is Swift

2023-05-22 10:10:15 -07:00

codescan.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

contrast-scan.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

crda.yml

Add CRDA starter workflow and modify openshift workflow

2022-06-24 16:25:53 +05:30

crunch42.yml

Update workflow to use the newest version of 42Crunch REST API Static Security Testing Action

2022-06-07 17:57:25 +01:00

datree.yml

Update code-scanning/datree.yml

2022-12-08 09:57:36 +02:00

defender-for-devops.yml

fixed typo (#1942 )

2023-02-21 18:20:42 +05:30

dependency-review.yml

Update the sample version of the Dependency Review action.

2022-06-28 17:20:56 +02:00

detekt.yml

Replace deprecated command with environment file

2023-02-28 00:18:12 +09:00

devskim.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

eslint.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

ethicalcheck.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

flawfinder.yml

Merge branch 'main' into thboop/updateCodeScanning

2022-03-31 09:32:00 -04:00

fortify.yml

Merge branch 'main' into thboop/updateCodeScanning

2022-03-31 09:32:00 -04:00

frogbot-scan-and-fix.yml

Frogbot update (#1980 )

2023-03-13 16:26:25 +05:30

frogbot-scan-pr.yml

Frogbot update (#1980 )

2023-03-13 16:26:25 +05:30

hadolint.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

jscrambler-code-integrity.yml

Add Jscrambler Code Integrity starter workflow (#1893 )

2023-01-31 16:25:13 +05:30

kubesec.yml

Merge branch 'main' into thboop/updateCodeScanning

2022-03-31 09:32:00 -04:00

lintr.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

mayhem-for-api.yml

Merge branch 'main' into thboop/updateCodeScanning

2022-03-31 09:32:00 -04:00

mobsf.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

msvc.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

neuralegion.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

njsscan.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

nowsecure-mobile-sbom.yml

Add NowSecure Mobile SBOM starter workflow

2022-09-28 11:25:15 -04:00

nowsecure.yml

Merge branch 'main' into thboop/updateCodeScanning

2022-03-31 09:32:00 -04:00

ossar.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

phpmd.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

pmd.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

powershell.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

prisma.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

puppet-lint.yml

Update ruby/setup-ruby for CVE-2023-28755 and CVE-2023-28756

2023-04-04 14:26:08 -07:00

pyre.yml

Add Pyre starter workflow

2022-06-06 18:04:42 -04:00

pysa.yml

Add workflow for Pysa

2022-06-06 18:06:03 -04:00

README.md

Fix broken link in README.md

2021-04-17 14:08:56 -04:00

rubocop.yml

Update ruby/setup-ruby for CVE-2023-28755 and CVE-2023-28756

2023-04-04 14:26:08 -07:00

rust-clippy.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

scorecard.yml

Update scorecard.yml with latest releases (#1944 )

2023-02-16 11:39:52 +05:30

securitycodescan.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

semgrep.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

snyk-container.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

snyk-infrastructure.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

snyk-security.yml

Addition of snyk-security workflow to enable the Snyk platform from a single GitHub Action (#1939 )

2023-03-07 16:22:52 +05:30

sobelow.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

sonarcloud.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

sonarqube.yml

Fix whitespaces

2022-12-08 06:10:22 +00:00

soos-dast-scan.yml

linter

2022-12-13 08:40:14 -03:00

stackhawk.yml

Update Actions to node16 (#1469 )

2022-03-28 22:40:48 +05:30

synopsys-io.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

sysdig-scan.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

tfsec.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

trivy.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

veracode.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

xanitizer.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

zscaler-iac-scan.yml

update zscaler iac scan version

2022-10-25 16:32:52 +05:30

zscan.yml

Apply suggestions from code review

2022-11-08 14:09:19 +01:00

README.md

Code Scanning Workflows

GitHub code scanning is a developer-first, GitHub-native approach to easily find security vulnerabilities before they reach production. Before you can configure code scanning for a repository, you must enable code scanning by adding a GitHub Actions workflow to the repository. For more information, see Setting up code scanning for a repository.