Skip to content

Commit

Permalink
chore: do
Browse files Browse the repository at this point in the history
  • Loading branch information
btlghrants committed Aug 26, 2024
1 parent 7ef14fc commit c4d1938
Show file tree
Hide file tree
Showing 23 changed files with 9,887 additions and 4,483 deletions.
42 changes: 21 additions & 21 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
@@ -1,24 +1,24 @@
# Please see the documentation for all configuration options:
# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
# # Please see the documentation for all configuration options:
# # https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates

version: 2
updates:
- package-ecosystem: npm # See documentation for possible values
directory: "/" # Location of package manifests
schedule:
interval: daily
groups:
production-dependencies:
dependency-type: "production"
development-dependencies:
dependency-type: "development"
# version: 2
# updates:
# - package-ecosystem: npm # See documentation for possible values
# directory: "/" # Location of package manifests
# schedule:
# interval: daily
# groups:
# production-dependencies:
# dependency-type: "production"
# development-dependencies:
# dependency-type: "development"

- package-ecosystem: github-actions
directory: /
schedule:
interval: daily
# - package-ecosystem: github-actions
# directory: /
# schedule:
# interval: daily

- package-ecosystem: docker
directory: /
schedule:
interval: daily
# - package-ecosystem: docker
# directory: /
# schedule:
# interval: daily
110 changes: 55 additions & 55 deletions .github/workflows/codeql.yml
Original file line number Diff line number Diff line change
@@ -1,56 +1,56 @@
# For most projects, this workflow file will not need changing; you simply need
# to commit it to your repository.
#
# You may wish to alter this file to override the set of languages analyzed,
# or to provide custom queries or build logic.
#
# ******** NOTE ********
# We have attempted to detect the languages in your repository. Please check
# the `language` matrix defined below to confirm you have the correct set of
# supported CodeQL languages.
#
name: "CodeQL"

on:
push:

permissions:
contents: read


jobs:
analyze:
name: Analyze
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write

strategy:
fail-fast: false
matrix:
language: ["javascript", "typescript"]
# CodeQL supports [ $supported-codeql-languages ]
# Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support

steps:
- name: Checkout repository
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7

# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@2c779ab0d087cd7fe7b826087247c2c81f27bfa6 # v3.26.5
with:
languages: ${{ matrix.language }}

# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
# If this step fails, then you should remove it and run the build manually (see below)
- name: Autobuild
uses: github/codeql-action/autobuild@2c779ab0d087cd7fe7b826087247c2c81f27bfa6 # v3.26.5

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@2c779ab0d087cd7fe7b826087247c2c81f27bfa6 # v3.26.5
with:
category: "/language:${{matrix.language}}"
# # For most projects, this workflow file will not need changing; you simply need
# # to commit it to your repository.
# #
# # You may wish to alter this file to override the set of languages analyzed,
# # or to provide custom queries or build logic.
# #
# # ******** NOTE ********
# # We have attempted to detect the languages in your repository. Please check
# # the `language` matrix defined below to confirm you have the correct set of
# # supported CodeQL languages.
# #
# name: "CodeQL"

# on:
# push:

# permissions:
# contents: read


# jobs:
# analyze:
# name: Analyze
# runs-on: ubuntu-latest
# permissions:
# actions: read
# contents: read
# security-events: write

# strategy:
# fail-fast: false
# matrix:
# language: ["javascript", "typescript"]
# # CodeQL supports [ $supported-codeql-languages ]
# # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support

# steps:
# - name: Checkout repository
# uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7

# # Initializes the CodeQL tools for scanning.
# - name: Initialize CodeQL
# uses: github/codeql-action/init@2c779ab0d087cd7fe7b826087247c2c81f27bfa6 # v3.26.5
# with:
# languages: ${{ matrix.language }}

# # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
# # If this step fails, then you should remove it and run the build manually (see below)
# - name: Autobuild
# uses: github/codeql-action/autobuild@2c779ab0d087cd7fe7b826087247c2c81f27bfa6 # v3.26.5

# - name: Perform CodeQL Analysis
# uses: github/codeql-action/analyze@2c779ab0d087cd7fe7b826087247c2c81f27bfa6 # v3.26.5
# with:
# category: "/language:${{matrix.language}}"

46 changes: 23 additions & 23 deletions .github/workflows/commitlint.yml
Original file line number Diff line number Diff line change
@@ -1,30 +1,30 @@
name: PR Title Check
# name: PR Title Check

# Declare default permissions as read only.
permissions: read-all
# # Declare default permissions as read only.
# permissions: read-all

on:
pull_request:
branches: [main]
types: [opened, edited, synchronize]
# on:
# pull_request:
# branches: [main]
# types: [opened, edited, synchronize]

jobs:
title_check:
runs-on: ubuntu-latest
# jobs:
# title_check:
# runs-on: ubuntu-latest

steps:
- name: Checkout
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
fetch-depth: 0
# steps:
# - name: Checkout
# uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
# with:
# fetch-depth: 0

- name: Setup Node.js
uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
# - name: Setup Node.js
# uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3

- name: Install commitlint
run: npm install --save-dev @commitlint/{config-conventional,cli}
# - name: Install commitlint
# run: npm install --save-dev @commitlint/{config-conventional,cli}

- name: Lint PR title
env:
PR_TITLE: ${{ github.event.pull_request.title }}
run: echo "$PR_TITLE" | npx commitlint
# - name: Lint PR title
# env:
# PR_TITLE: ${{ github.event.pull_request.title }}
# run: echo "$PR_TITLE" | npx commitlint
40 changes: 20 additions & 20 deletions .github/workflows/dependency-review.yml
Original file line number Diff line number Diff line change
@@ -1,22 +1,22 @@
# Dependency Review Action
#
# This Action will scan dependency manifest files that change as part of a Pull Request,
# surfacing known-vulnerable versions of the packages declared or updated in the PR.
# Once installed, if the workflow run is marked as required,
# PRs introducing known-vulnerable packages will be blocked from merging.
#
# Source repository: https://github.com/actions/dependency-review-action
name: 'Dependency Review'
on: [pull_request]
# # Dependency Review Action
# #
# # This Action will scan dependency manifest files that change as part of a Pull Request,
# # surfacing known-vulnerable versions of the packages declared or updated in the PR.
# # Once installed, if the workflow run is marked as required,
# # PRs introducing known-vulnerable packages will be blocked from merging.
# #
# # Source repository: https://github.com/actions/dependency-review-action
# name: 'Dependency Review'
# on: [pull_request]

permissions:
contents: read
# permissions:
# contents: read

jobs:
dependency-review:
runs-on: ubuntu-latest
steps:
- name: 'Checkout Repository'
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- name: 'Dependency Review'
uses: actions/dependency-review-action@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c # v4.3.4
# jobs:
# dependency-review:
# runs-on: ubuntu-latest
# steps:
# - name: 'Checkout Repository'
# uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
# - name: 'Dependency Review'
# uses: actions/dependency-review-action@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c # v4.3.4
62 changes: 31 additions & 31 deletions .github/workflows/digestabot.yml
Original file line number Diff line number Diff line change
@@ -1,38 +1,38 @@
name: Image digest update
# name: Image digest update

on:
workflow_dispatch:
schedule:
# At the end of every day
- cron: "0 0 * * *"
# on:
# workflow_dispatch:
# schedule:
# # At the end of every day
# - cron: "0 0 * * *"

permissions: # added using https://github.com/step-security/secure-repo
contents: read
# permissions: # added using https://github.com/step-security/secure-repo
# contents: read

jobs:
image-update:
name: Image digest update
runs-on: ubuntu-latest
# jobs:
# image-update:
# name: Image digest update
# runs-on: ubuntu-latest

permissions:
pull-requests: write # to open Pull requests
id-token: write # used to sign the commits using gitsign
# permissions:
# pull-requests: write # to open Pull requests
# id-token: write # used to sign the commits using gitsign

steps:
- name: Harden Runner
uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
with:
egress-policy: audit
# steps:
# - name: Harden Runner
# uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
# with:
# egress-policy: audit

- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- uses: chainguard-dev/digestabot@02ea60d2aeb26664ace4a9cc2ecdbea96888aaa4 # v1.2.0
with:
token: ${{ secrets.GITHUB_TOKEN }}
signoff: true # optional
author: ${{ github.actor }} <${{ github.actor_id }}+${{ github.actor }}@users.noreply.github.com> # optional
committer: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> # optional
labels-for-pr: automated pr, kind/cleanup, release-note-none # optional
branch-for-pr: update-digests # optional
title-for-pr: Update images digests # optional
commit-message: Update images digests # optional
# - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
# - uses: chainguard-dev/digestabot@02ea60d2aeb26664ace4a9cc2ecdbea96888aaa4 # v1.2.0
# with:
# token: ${{ secrets.GITHUB_TOKEN }}
# signoff: true # optional
# author: ${{ github.actor }} <${{ github.actor_id }}+${{ github.actor }}@users.noreply.github.com> # optional
# committer: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> # optional
# labels-for-pr: automated pr, kind/cleanup, release-note-none # optional
# branch-for-pr: update-digests # optional
# title-for-pr: Update images digests # optional
# commit-message: Update images digests # optional

Loading

0 comments on commit c4d1938

Please sign in to comment.