neilnaveen
|
43b185e1c1
|
chore: Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)
Signed-off-by: neilnaveen <42328488+neilnaveen@users.noreply.github.com>
|
2022-07-04 01:19:58 +00:00 |
|
Andrew Murray
|
954aa4e01d
|
Updated setup-python, checkout and upload-artifact actions to v3
|
2022-03-04 20:04:12 +11:00 |
|
Hugo van Kemenade
|
22ad04743c
|
GHA: Add workflow_dispatch to enable manually triggering builds
|
2021-11-30 22:14:34 +02:00 |
|
Hugo van Kemenade
|
b744e7933a
|
Use actions/setup-python's pip cache
|
2021-11-18 13:42:41 +02:00 |
|
Andrew Murray
|
2e5d7dd387
|
Use python3
|
2021-01-06 22:42:31 +11:00 |
|
Hugo van Kemenade
|
fc5f4b4976
|
Name it "Lint"
|
2020-07-02 13:08:42 +03:00 |
|
Hugo van Kemenade
|
829e1f189b
|
Simplify CI config
|
2020-06-30 22:04:43 +03:00 |
|
Hugo van Kemenade
|
a08588250b
|
Use v2 actions
|
2020-06-30 22:01:19 +03:00 |
|
Hugo
|
7e3556e5f6
|
GHA: Force colour output of pre-commit
|
2020-06-22 12:27:08 +03:00 |
|
nulano
|
999823130f
|
use v2 checkout in all workflows
|
2020-04-12 11:55:32 +10:00 |
|
Hugo
|
995707f3ad
|
Run lint with pre-commit
|
2020-03-22 10:36:55 +02:00 |
|
Hugo
|
c22a5ffae7
|
Print some basic system information for the logs
|
2019-12-09 22:35:31 +02:00 |
|
Hugo
|
9a247bd597
|
Test Python 3.8 on GHA
|
2019-11-05 13:13:36 +02:00 |
|
Hugo
|
e595ddbaa1
|
Test with GitHub Actions
|
2019-10-12 10:49:26 +03:00 |
|
Hugo
|
368570bfa5
|
Revert "Only run on push to prevent double runs"
This reverts commit f6eb0f7702.
|
2019-09-13 09:19:59 +03:00 |
|
Hugo
|
f6eb0f7702
|
Only run on push to prevent double runs
|
2019-09-13 08:23:15 +03:00 |
|
Hugo
|
77f5b04ed7
|
Add job name with matrix.python
|
2019-09-11 17:36:25 +03:00 |
|
Hugo
|
426d0c348f
|
Rename var to follow example at https://github.com/actions/setup-python
|
2019-09-11 17:36:25 +03:00 |
|
Hugo
|
fb257ecfd9
|
Lint using GitHub Actions
|
2019-09-11 17:36:25 +03:00 |
|