dependabot[bot]
|
f97ff6bf16
|
chore(deps): bump the github-actions group with 6 updates (#8008)
Bumps the github-actions group with 6 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `3` | `4` |
| [actions/setup-node](https://github.com/actions/setup-node) | `3` | `4` |
| [github/codeql-action](https://github.com/github/codeql-action) | `2` | `3` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `1` | `2` |
| [bluwy/release-for-reddit-action](https://github.com/bluwy/release-for-reddit-action) | `1` | `2` |
| [cbrgm/mastodon-github-action](https://github.com/cbrgm/mastodon-github-action) | `1` | `2` |
Updates `actions/checkout` from 3 to 4
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)
Updates `actions/setup-node` from 3 to 4
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v3...v4)
Updates `github/codeql-action` from 2 to 3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)
Updates `softprops/action-gh-release` from 1 to 2
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](https://github.com/softprops/action-gh-release/compare/v1...v2)
Updates `bluwy/release-for-reddit-action` from 1 to 2
- [Release notes](https://github.com/bluwy/release-for-reddit-action/releases)
- [Changelog](https://github.com/bluwy/release-for-reddit-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/bluwy/release-for-reddit-action/compare/v1...v2)
Updates `cbrgm/mastodon-github-action` from 1 to 2
- [Release notes](https://github.com/cbrgm/mastodon-github-action/releases)
- [Commits](https://github.com/cbrgm/mastodon-github-action/compare/v1...v2)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: softprops/action-gh-release
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: bluwy/release-for-reddit-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: cbrgm/mastodon-github-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2024-04-24 15:40:29 +02:00 |
|
MCMXC
|
becacb99a9
|
build: update used versions in github workflow actions (#5168)
- update all actions/* to v3
- update github/codeql-action/* to v2
|
2022-08-06 21:11:15 +03:00 |
|
neilnaveen
|
6bbb7b1d26
|
chore: Set permissions for GitHub actions (#4607)
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)
Signed-off-by: neilnaveen <42328488+neilnaveen@users.noreply.github.com>
|
2022-04-22 03:04:45 +03:00 |
|
Zoltan Kochan
|
bc9dbc5ba7
|
ci: add coeql analysis
|
2021-03-13 01:17:18 +02:00 |
|