Skip to content

Commit acc574e

Browse files
dependabot[bot]fabasoad
dependabot[bot]
and
fabasoad
authored
Bump github/codeql-action from 2 to 3 (#110)
* Bump github/codeql-action from 2 to 3 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v2...v3) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> * Bump gitleaks/gitleaks from 8.18.0 to 8.18.1 * Bump fabasoad/pre-commit-snyk from 0.4.0 to 0.5.0 * Bump igorshubovych/markdownlint-cli from 0.37.0 to 0.38.0 * Bump igorshubovych/markdownlint-cli from 0.37.0 to 0.38.0 * Bump igorshubovych/markdownlint-cli from 0.37.0 to 0.38.0 * Bump igorshubovych/markdownlint-cli from 0.37.0 to 0.38.0 * Rollback changes * Rollback changes * Test 1 --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Eugene <[email protected]>
1 parent 19e3a52 commit acc574e

21 files changed

+3033
-4709
lines changed

‎.github/workflows/functional-tests.yml

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,8 @@ jobs:
2929
api-key: SIGHTENGINE_API_SECRET
3030
threshold: 0.8
3131
steps:
32-
- uses: actions/checkout@v4
32+
- name: Checkout ${{ github.repository }}
33+
uses: actions/checkout@v4
3334
- name: Prepare API key
3435
id: secrets
3536
run: |
@@ -42,7 +43,8 @@ jobs:
4243
run: |
4344
curl https://images-na.ssl-images-amazon.com/images/I/91cDPlxcRiL._SL1500_.jpg --output test.jpg
4445
git add test.jpg
45-
- uses: ./
46+
- name: Detect NSFW content
47+
uses: ./
4648
with:
4749
github_token: ${{ secrets.GITHUB_TOKEN }}
4850
provider: ${{ matrix.provider }}

‎.github/workflows/linting.yml

Lines changed: 57 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,57 @@
1+
---
2+
name: Linting
3+
4+
on: # yamllint disable-line rule:truthy
5+
pull_request: {}
6+
push:
7+
branches:
8+
- main
9+
10+
jobs:
11+
eslint:
12+
name: ESLint
13+
runs-on: ubuntu-latest
14+
steps:
15+
- name: Checkout ${{ github.repository }}
16+
uses: actions/checkout@v4
17+
- name: Setup node
18+
uses: actions/setup-node@v4
19+
with:
20+
node-version: "20.10.0"
21+
- name: Cache yarn dependencies
22+
id: yarn-cache
23+
uses: actions/cache@v3
24+
with:
25+
path: |
26+
.yarn/cache
27+
node_modules
28+
key: ${{ runner.os }}-yarn-${{ hashFiles('**/yarn.lock') }}-${{ hashFiles('**/.yarnrc.yml') }}
29+
restore-keys: |
30+
${{ runner.os }}-yarn-
31+
- name: Compile
32+
if: ${{ steps.yarn-cache.outputs.cache-hit != 'true' }}
33+
run: yarn install
34+
- name: Run ESLint
35+
uses: sibiraj-s/action-eslint@v3
36+
with:
37+
all-files: "true"
38+
ignore-patterns: |
39+
.github
40+
.yarn
41+
coverage
42+
dist
43+
node_modules
44+
eslint-args: "-o eslint-results.sarif -f ${{ github.workspace }}/node_modules/@microsoft/eslint-formatter-sarif/sarif.js"
45+
extensions: "js,jsx,ts,tsx"
46+
annotations: true
47+
- name: Upload to GHAS
48+
if: always()
49+
uses: github/codeql-action/upload-sarif@v3
50+
with:
51+
category: "eslint"
52+
sarif_file: "eslint-results.sarif"
53+
pre-commit:
54+
name: Pre-commit
55+
uses: fabasoad/reusable-workflows/.github/workflows/wf-pre-commit.yml@main
56+
with:
57+
skip-hooks: "audit, build, eslint, test, snyk-test"

‎.github/workflows/pre-commit.yml

Lines changed: 0 additions & 51 deletions
This file was deleted.

‎.github/workflows/release.yml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,8 @@ jobs:
1111
name: Create release
1212
runs-on: ubuntu-latest
1313
steps:
14-
- uses: actions/checkout@v4
14+
- name: Checkout ${{ github.repository }}
15+
uses: actions/checkout@v4
1516
with:
1617
fetch-depth: 0
1718
- name: Get changelog

‎.github/workflows/security.yml

Lines changed: 35 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,40 +1,59 @@
11
---
22
name: Security
33

4-
on:
4+
on: # yamllint disable-line rule:truthy
5+
pull_request: {}
56
push:
67
branches:
7-
- 'main'
8-
pull_request:
8+
- main
99

1010
defaults:
1111
run:
1212
shell: sh
1313

1414
jobs:
15-
codeql:
16-
name: CodeQL
15+
code-scanning:
16+
name: Code scanning
1717
runs-on: ubuntu-latest
18-
strategy:
19-
fail-fast: false
20-
matrix:
21-
language: ['javascript']
2218
steps:
23-
- name: Checkout repository
19+
- name: Checkout ${{ github.repository }}
2420
uses: actions/checkout@v4
2521
- name: Initialize CodeQL
26-
uses: github/codeql-action/init@v2
22+
uses: github/codeql-action/init@v3
2723
with:
28-
languages: ${{ matrix.language }}
29-
- name: Autobuild
30-
uses: github/codeql-action/autobuild@v2
24+
languages: "javascript"
3125
- name: Perform CodeQL Analysis
32-
uses: github/codeql-action/analyze@v2
26+
id: codeql-analysis
27+
uses: github/codeql-action/analyze@v3
28+
- name: Upload to GHAS
29+
if: always()
30+
uses: github/codeql-action/upload-sarif@v3
31+
with:
32+
category: "code-scanning"
33+
sarif_file: "${{ steps.codeql-analysis.outputs.sarif-output }}"
3334
yarn-audit:
3435
name: Yarn audit
3536
runs-on: ubuntu-latest
3637
steps:
37-
- name: Checkout repository
38+
- name: Checkout ${{ github.repository }}
3839
uses: actions/checkout@v4
3940
- name: Yarn audit
4041
run: yarn npm audit --all
42+
directory-scanning:
43+
name: Directory scanning
44+
runs-on: ubuntu-latest
45+
steps:
46+
- name: Checkout ${{ github.repository }}
47+
uses: actions/checkout@v4
48+
- name: Scan current project
49+
id: scan-directory
50+
uses: anchore/scan-action@v3
51+
with:
52+
by-cve: "true"
53+
path: "."
54+
- name: Upload to GHAS
55+
if: always()
56+
uses: github/codeql-action/upload-sarif@v3
57+
with:
58+
category: "directory-scanning"
59+
sarif_file: "${{ steps.scan-directory.outputs.sarif }}"

‎.github/workflows/sync-labels.yml

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -7,15 +7,14 @@ on: # yamllint disable-line rule:truthy
77
- main
88
paths:
99
- .github/labels.yml
10-
workflow_dispatch:
10+
workflow_dispatch: {}
1111

1212
jobs:
1313
sync-labels:
1414
name: Sync labels
1515
runs-on: ubuntu-latest
1616
steps:
17-
- uses: actions/checkout@v4
17+
- name: Checkout ${{ github.repository }}
18+
uses: actions/checkout@v4
1819
- name: Run Label Syncer
1920
uses: micnncim/action-label-syncer@v1
20-
env:
21-
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

‎.github/workflows/unit-tests.yml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ on:
88
pull_request:
99

1010
jobs:
11-
unit_tests:
11+
unit-tests:
1212
name: Tests
1313
timeout-minutes: 5
1414
runs-on: ubuntu-latest
@@ -19,7 +19,8 @@ jobs:
1919
SIGHTENGINE_API_USER: ${{ secrets.SIGHTENGINE_API_USER }}
2020
SIGHTENGINE_API_SECRET: ${{ secrets.SIGHTENGINE_API_SECRET }}
2121
steps:
22-
- uses: actions/checkout@v4
22+
- name: Checkout ${{ github.repository }}
23+
uses: actions/checkout@v4
2324
- name: Cache node_modules
2425
id: cache
2526
uses: actions/cache@v3

‎.github/workflows/update-license.yml

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,10 +9,12 @@ jobs:
99
run:
1010
runs-on: ubuntu-latest
1111
steps:
12-
- uses: actions/checkout@v4
12+
- name: Checkout ${{ github.repository }}
13+
uses: actions/checkout@v4
1314
with:
1415
fetch-depth: 0
15-
- uses: FantasticFiasco/action-update-license-year@v3
16+
- name: Update LICENSE file
17+
uses: FantasticFiasco/action-update-license-year@v3
1618
with:
1719
token: ${{ secrets.GITHUB_TOKEN }}
1820
assignees: ${{ github.repository_owner }}

‎.gitleaks.toml

Lines changed: 0 additions & 7 deletions
This file was deleted.

‎.gitleaksignore

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
.yarn/releases/yarn-4.0.2.cjs:aws-access-token:149
2+
.yarn/releases/yarn-4.0.2.cjs:generic-api-key:567

0 commit comments

Comments
 (0)