CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,719 Commits 7 Branches 2 Tags
3bf925ca325964acd3b6c8d108e00a6aef5e65ff
Commit Graph
23 Commits
Author SHA1 Message Date
Michael Li 11d4211f30 Revert "chore(deps): bump actions/setup-python from 4.7.1 to 4.8.0 (#4098)" (#4101) 
This reverts commit 17e9edc07f.
 2023-12-05 09:58:12 -05:00
dependabot[bot] 17e9edc07f chore(deps): bump actions/setup-python from 4.7.1 to 4.8.0 (#4098) 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4.7.1 to 4.8.0.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236...b64ffcaf5b410884ad320a9cfac8866006a109aa)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-05 09:53:10 -05:00
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] b159080593 Result of tsccr-helper -log-level=info -pin-all-workflows . (#4080) 
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
 2023-12-04 09:48:09 -05:00
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] b5ae6f0ceb Result of tsccr-helper -log-level=info -pin-all-workflows . (#3968) 
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
 2023-11-01 10:08:02 -04:00
mickael-hc fe948942c2 security-scan: temporarily pin semgrep to 1.45.0 (#3931) 2023-10-26 10:34:21 -04:00
dependabot[bot] 1f598988e6 chore(deps): bump actions/setup-python from 4.7.0 to 4.7.1 (#3837) 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4.7.0 to 4.7.1.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/61a6322f88396a6271a6ee3565807d608ecaddd1...65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:21:39 -04:00
Mark Collao d42369551a Update security-scan.yml 2023-10-11 12:55:04 -05:00
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] ae85c5d7ff Result of tsccr-helper -log-level=info -pin-all-workflows . (#3786) 
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
 2023-10-11 09:17:52 -04:00
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] c55df52d44 Result of tsccr-helper -log-level=info -pin-all-workflows . (#3658) 
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
 2023-09-01 12:21:34 -04:00
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] e8207d4bb2 Result of tsccr-helper -log-level=info -pin-all-workflows . (#3527) 
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
 2023-08-01 08:42:39 -04:00
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] 7a069cb54e Result of tsccr-helper -log-level=info -pin-all-workflows . (#3466) 
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
 2023-07-18 09:25:10 -04:00
Mark Collao 81016ef984 fix paths-ignore on security-scan workflow (#3435) 2023-07-13 13:08:29 -05:00
Mark Collao 75b4234668 chore: prefer gosec for semgrep rule and turn on codeql (#3418) 2023-07-13 13:03:53 -05:00
Mark Collao 23bc0782ea chore: update security-scanner workflow runner (#3309) 2023-06-12 16:07:55 -05:00
Michael Li 253d191440 chore: Bump version of security scanner (#3234) 
This mitigates the GitHub deprecation of set-output and node 12.
 2023-05-19 12:06:10 -04:00
hashicorp-tsccr[bot]hashicorp-tsccr[bot]Michael Li
 		cc94accc4f SEC-090: Automated trusted workflow pinning (2023-04-27) (#3187) 
* Result of tsccr-helper -pin-all-workflows .

* chore: Disable cache from setup-go

---------

Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
Co-authored-by: Michael Li <michael.li@hashicorp.com>
 2023-05-02 16:37:11 -04:00
Timothy Messier e4fbc0281a chore(ci): Update and pin actions steps 2023-03-29 18:39:01 +00:00
dependabot[bot] 2b7accac84 chore(deps): bump actions/setup-python from 3.1.2 to 4.5.0 (#3038) 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 3.1.2 to 4.5.0.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/98f2ad02fd48d057ee3b4d4f66525b231c3e52b6...d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-03-08 15:36:33 -05:00
Timothy Messier 236d7ca872 ci: Additional githubaction configuration (#3034) 
- Pin action versions
- Dependabot to notify about action updates
- Update codeowners
 2023-03-01 08:00:46 -05:00
Timothy Messier 18b0bcb395 chore(ci): Revert some permission settings 
These workflows seemed to break with these permission changes.
 2023-02-23 21:14:53 +00:00
Timothy Messier 2a47e9ddf8 ci: Set permissions in workflows (#3011) 2023-02-23 15:50:26 -05:00
Mark Collao 115b8fd5cb fix: update sec-scanner sha 2023-02-10 21:16:41 -06:00
Mark Collao 5e3244a2e5 add security-scan workflow (#2945) 
* add security-scan workflow

* remove uneeded branch; adopt .go-version

* fix bad yaml

* fix random newlines

* add copy
 2023-02-10 11:12:56 -06:00