Felix Fontein
1c07537dd5
Fix workflow's permissions.
...
(cherry picked from commit 2149056595
2022-08-21 11:35:59 +02:00
patchback[bot]
a886633758
Make reuse conformant ( #5138 ) ( #5139 )
...
* Add .license files.
* Add reuse test.
* Update README.
* Also remove .yaml changelog fragments.
* Add changelog fragment.
* Normalize licenses extra sanity test.
* Declare REUSE conformance.
* Update README.md
(cherry picked from commit 02d9a1de9e
2022-08-21 09:14:04 +02:00
Felix Fontein
22a400d626
Add default license header to files which have no copyright or license header yet ( #5074 ) ( #5075 )
...
* Add default license header to files which have no copyright or license header yet.
* yml extension should have been xml...
(cherry picked from commit 1ab2a5f1bc
2022-08-05 20:16:36 +02:00
nathannaveen
dc4cdb1a58
chore: Set permissions for GitHub actions ( #4641 )
...
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ )
Signed-off-by: nathannaveen <42319948+nathannaveen@users.noreply.github.com>
2022-05-08 08:57:53 +02:00
dependabot[bot]
720e0544f9
Bump github/codeql-action from 1 to 2 ( #4639 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 1 to 2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-06 17:56:45 +02:00
dependabot[bot]
cf87944333
Bump actions/checkout from 2 to 3 ( #4638 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-06 17:55:59 +02:00
John R Barker
c5f0c34190
codeql-analysis.yml cron
2020-07-06 20:24:45 +01:00
John R Barker
24c66fcc43
Create codeql-analysis.yml
2020-07-06 20:19:31 +01:00
John R Barker
0ff780cc36
Update Galaxy paths ( #2 )
...
* Update Galaxy paths
2020-03-09 14:09:08 +00:00
Ansible Core Team
aebc1b03fd
Initial commit
2020-03-09 09:11:07 +00:00
