-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Removing the black autocommit action and doing some general housekeep…
…ing on the other GH actions
- Loading branch information
1 parent
9a0be4b
commit 096c289
Showing
7 changed files
with
204 additions
and
235 deletions.
There are no files selected for viewing
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,40 +1,40 @@ | ||
name: "CodeQL" | ||
|
||
on: | ||
workflow_call: | ||
workflow_call: | ||
|
||
jobs: | ||
analyze: | ||
name: Analyze | ||
runs-on: ubuntu-latest | ||
permissions: | ||
actions: read | ||
contents: read | ||
security-events: write | ||
analyze: | ||
name: Analyze | ||
runs-on: ubuntu-latest | ||
permissions: | ||
Check notice Code scanning / Checkov (reported by Codacy) Ensure top-level permissions are not set to write-all Note
Ensure top-level permissions are not set to write-all
|
||
actions: read | ||
contents: read | ||
security-events: write | ||
|
||
strategy: | ||
fail-fast: false | ||
matrix: | ||
language: [ 'python' ] | ||
# python-version: ["3.9", "3.10"] | ||
# CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ] | ||
# Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support | ||
strategy: | ||
fail-fast: false | ||
matrix: | ||
language: ["python"] | ||
python-version: ["3.10", "3.11", "3.12"] | ||
# CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ] | ||
# Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support | ||
|
||
steps: | ||
- name: Checkout repository | ||
uses: actions/checkout@v3 | ||
steps: | ||
- name: Checkout repository | ||
uses: actions/checkout@v4 | ||
|
||
# Initializes the CodeQL tools for scanning. | ||
- name: Initialize CodeQL | ||
uses: github/codeql-action/init@v2 | ||
with: | ||
languages: ${{ matrix.language }} | ||
# If you wish to specify custom queries, you can do so here or in a config file. | ||
# By default, queries listed here will override any specified in a config file. | ||
# Prefix the list here with "+" to use these queries and those in the config file. | ||
# Initializes the CodeQL tools for scanning. | ||
- name: Initialize CodeQL | ||
uses: github/codeql-action/init@v2 | ||
with: | ||
languages: ${{ matrix.language }} | ||
# If you wish to specify custom queries, you can do so here or in a config file. | ||
# By default, queries listed here will override any specified in a config file. | ||
# Prefix the list here with "+" to use these queries and those in the config file. | ||
|
||
# Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs | ||
# queries: security-extended,security-and-quality | ||
# Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs | ||
# queries: security-extended,security-and-quality | ||
|
||
- name: Perform CodeQL Analysis | ||
uses: github/codeql-action/analyze@v2 | ||
- name: Perform CodeQL Analysis | ||
uses: github/codeql-action/analyze@v2 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,20 +1,20 @@ | ||
name: Merge to main / develop | ||
|
||
on: | ||
push: | ||
branches: | ||
- main | ||
- develop | ||
push: | ||
branches: | ||
- main | ||
- develop | ||
|
||
jobs: | ||
run_unit_tests: | ||
uses: ./.github/workflows/run_tests.yaml | ||
run_unit_tests: | ||
uses: ./.github/workflows/run_tests.yaml | ||
|
||
run_code_ql: | ||
uses: ./.github/workflows/codeql.yaml | ||
run_code_ql: | ||
uses: ./.github/workflows/codeql.yaml | ||
|
||
run_codacy: | ||
uses: ./.github/workflows/codacy.yaml | ||
run_codacy: | ||
uses: ./.github/workflows/codacy.yaml | ||
|
||
run_trivy: | ||
uses: ./.github/workflows/trivy.yaml | ||
run_trivy: | ||
uses: ./.github/workflows/trivy.yaml |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,26 +1,22 @@ | ||
name: Standard PR workflow | ||
|
||
on: | ||
pull_request: | ||
types: | ||
- opened | ||
- reopened | ||
- synchronize | ||
- ready_for_review | ||
pull_request: | ||
types: | ||
- opened | ||
- reopened | ||
- synchronize | ||
- ready_for_review | ||
|
||
jobs: | ||
format_files: | ||
uses: ./.github/workflows/black.yaml | ||
run_unit_tests: | ||
uses: ./.github/workflows/run_tests.yaml | ||
|
||
run_unit_tests: | ||
uses: ./.github/workflows/run_tests.yaml | ||
needs: format_files | ||
run_code_ql: | ||
uses: ./.github/workflows/codeql.yaml | ||
|
||
run_code_ql: | ||
uses: ./.github/workflows/codeql.yaml | ||
run_codacy: | ||
uses: ./.github/workflows/codacy.yaml | ||
|
||
run_codacy: | ||
uses: ./.github/workflows/codacy.yaml | ||
|
||
run_trivy: | ||
uses: ./.github/workflows/trivy.yaml | ||
run_trivy: | ||
uses: ./.github/workflows/trivy.yaml |
Oops, something went wrong.