Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ci: address OSSF Scorecard warnings #243

Merged
merged 5 commits into from
May 7, 2024
Merged

ci: address OSSF Scorecard warnings #243

merged 5 commits into from
May 7, 2024

Commits on May 6, 2024

  1. ci: address OSS scorecard warnings 

    * remediate the `Token-Permissions` warning/low score by moving the F5 CLA GH Action permissions around
* remediate the `Pinned-Dependencies` warning/low score by using specific Docker image SHAs and adding Docker image updates to Dependabot
* hopefully remediate the `Vulnerabilities` warning/low score by recreating `package-lock.json`
    @alessfg
    alessfg committed May 6, 2024
    Configuration menu
    Copy the full SHA
    83aea5e View commit details
    Browse the repository at this point in the history

Commits on May 7, 2024

  1. style: remove unnecessary closing parenthesis

    @alessfg
    alessfg committed May 7, 2024
    Configuration menu
    Copy the full SHA
    2139ac0 View commit details
    Browse the repository at this point in the history

  2. fix: remove SHAs from S3 Gateway image

    @alessfg
    alessfg committed May 7, 2024
    Configuration menu
    Copy the full SHA
    ecd47d0 View commit details
    Browse the repository at this point in the history

  3. style: rename main workflow to be clearer

    @alessfg
    alessfg committed May 7, 2024
    Configuration menu
    Copy the full SHA
    9834f39 View commit details
    Browse the repository at this point in the history

  4. ci: add workflow_dispatch and cron jobs 

    both the Scorecard and the S3 gateway build actions could use from both:
* being able to run the workflow on demand
* running the workflow once a week in case there's been no new builds/PRs in the last week
    @alessfg
    alessfg committed May 7, 2024
    Configuration menu
    Copy the full SHA
    763ebea View commit details
    Browse the repository at this point in the history