Skip to content

Release 1.3.0 #1908

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 36 commits into from
Feb 9, 2023
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
36 commits
Select commit Hold shift + click to select a range
8daceb1
Merge pull request #1299 from Devils-Knight/fix-dependabot
ashishkurmi Oct 21, 2022
7105c41
remediate files & packages
Devils-Knight Oct 25, 2022
b99b655
mod tidy
Devils-Knight Oct 26, 2022
f6256ca
add version comment to pinned actions
Devils-Knight Nov 4, 2022
ffdfe27
Merge pull request #1374 from Devils-Knight/comment
varunsh-coder Nov 7, 2022
088800b
Merge branch 'int' into pr/1352
varunsh-coder Nov 7, 2022
3da1738
Merge pull request #1352 from Devils-Knight/remediation
varunsh-coder Nov 7, 2022
7bcb807
Update harden runner version
varunsh-coder Nov 9, 2022
cc5afdc
Merge pull request #1379 from step-security/update-harden-harden-int
varunsh-coder Nov 9, 2022
b994863
[UPDATE] Pin actions to vx.y.z format (#1469)
Devils-Knight Nov 19, 2022
e9482c1
Update test command
varunsh-coder Nov 21, 2022
361b35a
Merge pull request #1476 from step-security/update-workflow-test-cmd
varunsh-coder Nov 21, 2022
8e7b11c
Update test cases
varunsh-coder Nov 21, 2022
4672343
Merge pull request #1477 from step-security/update-tests
varunsh-coder Nov 21, 2022
c096e5f
Merge branch 'main' into int
varunsh-coder Nov 21, 2022
9c234e9
update pinning remediation
Devils-Knight Nov 30, 2022
a84a433
Return secret metadata
varunsh-coder Dec 1, 2022
787f313
Merge pull request #1597 from step-security/return-secret-metadata
varunsh-coder Dec 1, 2022
9372c3f
Update secrets.go
varunsh-coder Dec 1, 2022
ea1fb43
Merge pull request #1598 from step-security/return-secret-metadata
varunsh-coder Dec 1, 2022
7906268
Merge pull request #1582 from Devils-Knight/pinIssue
varunsh-coder Dec 5, 2022
0e48ac5
configuring dependabot to use INT for upggrading dependencies
ashishkurmi Dec 7, 2022
e7de507
Merge pull request #1618 from step-security/ak-dependabot-int
ashishkurmi Dec 7, 2022
b57f3f7
Merge branch 'main' into int
varunsh-coder Dec 8, 2022
086252d
Merge branch 'main' into int
varunsh-coder Dec 8, 2022
582a89d
[FEATURE] Added Template and addWorkflow function to generate Codeql …
Devils-Knight Dec 10, 2022
ee52f8f
fixed typo
Devils-Knight Dec 10, 2022
ad10892
Merge pull request #1643 from Devils-Knight/issue
varunsh-coder Dec 12, 2022
23233ec
Update addworkflow.go
varunsh-coder Dec 14, 2022
14cc00f
Merge pull request #1657 from step-security/update-workflow-env
varunsh-coder Dec 14, 2022
1c68758
Update template
varunsh-coder Dec 17, 2022
8fe562e
Merge pull request #1667 from step-security/fix-template
varunsh-coder Dec 17, 2022
7903c6b
[FEATURE] Added template for Dependency-review and Scorecards (#1755)
Devils-Knight Jan 4, 2023
559d233
Merge branch 'main' into int
varunsh-coder Feb 9, 2023
e0c7869
Update expected-codeql.yml
varunsh-coder Feb 9, 2023
571b89a
Update reference from Secure-Workflow to Secure-Repo (#1905)
Devils-Knight Feb 9, 2023
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/automatePR.yml
Original file line number Diff line number Diff line change
Expand Up @@ -18,10 +18,10 @@ jobs:
steps:
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
with:
repository: step-security/secure-workflows
repository: step-security/secure-repo

- name: Automate PR
uses: step-security/secure-workflows/Automate-PR@98ff385ea512d8ac7a1445f95e199f6864f439e1
uses: step-security/secure-repo/Automate-PR@98ff385ea512d8ac7a1445f95e199f6864f439e1
with:
github-token: ${{secrets.PAT }}
issue-id: ${{ github.event.issue.number}}
2 changes: 1 addition & 1 deletion .github/workflows/codeql.yml
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ on:
schedule:
- cron: "35 17 * * 4"

permissions: # added using https://github.com/step-security/secure-workflows
permissions: # added using https://github.com/step-security/secure-repo
contents: read

jobs:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/int.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ on:
branches:
- int

permissions: # added using https://github.com/step-security/secure-workflows
permissions: # added using https://github.com/step-security/secure-repo
contents: read

jobs:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/kbanalysis.yml
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ jobs:

- uses: actions/checkout@d0651293c4a5a52e711f25b41b05b2212f385d28
with:
repository: step-security/secure-workflows
repository: step-security/secure-repo

- name: KBAnalysis
uses: step-security/secure-workflows/kbanalysis@main
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ on:
branches:
- main

permissions: # added using https://github.com/step-security/secure-workflows
permissions: # added using https://github.com/step-security/secure-repo
contents: read

jobs:
Expand Down Expand Up @@ -40,13 +40,13 @@ jobs:
secrets: |
AWS_ACCESS_KEY_ID:
name: 'AWS access key id'
description: 'Access key id for secure-workflows prod'
description: 'Access key id for secure-repo prod'
AWS_SECRET_ACCESS_KEY:
name: 'AWS secret access key'
description: 'Secret access key for secure-workflows prod'
description: 'Secret access key for secure-repo prod'
AWS_SESSION_TOKEN:
name: 'AWS session token'
description: 'Session token for secure-workflows prod'
description: 'Session token for secure-repo prod'

- name: Configure AWS Credentials
uses: aws-actions/configure-aws-credentials@ea7b857d8a33dc2fb4ef5a724500044281b49a5e
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ on:
branches:
- main # to update code coverage

permissions: # added using https://github.com/step-security/secure-workflows
permissions: # added using https://github.com/step-security/secure-repo
contents: read
concurrency:
group: ${{ github.workflow }}
Expand Down
Loading