Commit Graph

101 Commits

Author SHA1 Message Date
nathannaveen
787285e08a chore: Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: nathannaveen <42319948+nathannaveen@users.noreply.github.com>
2022-05-26 00:50:23 +00:00
Shivam Mathur
6cba851606
Add support for Ubuntu 22.04 2022-05-06 05:43:20 +05:30
jrfnl
33ad931dbb
GH Actions: version update for actions/cache
The update doesn't actually contain any changed functionality, it's mostly just a change of the Node version used by the action itself (from Node 12 to Node 16), but see the changelog for more info.

Refs:
* https://github.com/actions/cache/releases/
2022-03-21 15:39:20 +01:00
jrfnl
ddf8825c2f
GH Actions: version update for various predefined actions
A number of predefined actions have had major release, which warrant an update the workflow(s).

These updates don't actually contain any changed functionality, they are mostly just a change of the Node version used by the action itself (from Node 14 to Node 16).

Refs:
* https://github.com/actions/download-artifact/releases
* https://github.com/actions/upload-artifact/releases
2022-03-05 16:11:15 +01:00
Shivam Mathur
4678e809c3
Bump actions/checkout to v3 2022-03-02 06:00:52 +05:30
Shivam Mathur
44ff4ed92d
Refactor workflows and templates 2022-01-29 07:29:03 +05:30
Shivam Mathur
175c9649c4
Fix sending coverage to codecov in node workflow 2022-01-29 04:14:07 +05:30
Shivam Mathur
0a601ebeee
Use windows-2019 runner in CI workflow 2022-01-27 08:25:50 +05:30
Shivam Mathur
9ca9ab33ef
Update docs workflow 2022-01-20 22:03:33 +05:30
Shivam Mathur
14a9f0b4ae
Add CodeQL workflow
Add npm audit to the node workflow

Remove stepsecurity action from workflows
2022-01-20 21:45:07 +05:30
Shivam Mathur
cca8ad3588
Fix node-release workflow to add lib to the packages 2021-12-17 18:34:16 +05:30
Shivam Mathur
f4d1db5c23
Update Node version to 16.x 2021-12-07 21:33:45 +05:30
Shivam Mathur
cecf84878d
Update Harden Runner step in node workflows 2021-12-07 21:26:23 +05:30
Shivam Mathur
bee5abe269
Bump extension cache key in workflow.yml 2021-11-24 18:23:02 +05:30
Shivam Mathur
dfc02c42d9
Bump extension cache key in workflow.yml 2021-11-11 19:55:50 +05:30
Shivam Mathur
123f6df529
Improve npm release workflow [skip ci] 2021-11-11 05:26:21 +05:30
Shivam Mathur
341cf69e13
Add allowed endpoints to node workflow 2021-11-10 08:36:00 +05:30
Shivam Mathur
f7b503e36b
Add action to harden runner in node workflow 2021-11-10 06:17:07 +05:30
Aneesh Relan
b3bf0f3990 fix: remove dry run 2021-10-05 23:23:05 +05:30
Aneesh Relan
8426bf89fd ci: add github action to publish to npm and github packages 2021-10-05 23:10:58 +05:30
Shivam Mathur
a34eeedd37
Bump version to 2.14.0
Add config to generate types

Fix build error in install.ts after TypeScript upgrade

Minor refactor in install.test.ts

Add bugs, directories, files and types entries in package.json

Update Node.js dependencies

Update SECURITY.md
2021-09-11 05:25:45 +05:30
Shivam Mathur
6473b1c04c
Add 8.2 to the workflows 2021-09-02 00:18:50 +05:30
Shivam Mathur
ed62711289
Update sponsor options [skip ci] 2021-08-28 12:14:51 +05:30
Shivam Mathur
b717b2fcde
Rename macos-11.0 to macos-11 2021-08-18 09:52:47 +05:30
Shivam Mathur
947009a717
Sunset support for Ubuntu 16.04 2021-08-02 23:10:43 +05:30
Shivam Mathur
909090903e
Update SECURITY.md 2021-04-19 17:06:01 +05:30
Shivam Mathur
75a1b03f39
Update Node version to 15.x 2021-04-19 17:06:00 +05:30
Shivam Mathur
de8537f42a
Use lcov.info for coverage 2021-04-15 16:54:35 +05:30
Shivam Mathur
113fcc64e3
Fix docs workflow
Do not run docs workflow on macos-11.0

Run docs workflow on saturday
2021-03-03 09:16:13 +05:30
Shivam Mathur
068c794af7
Change Node.js version in the workflow 2021-01-07 00:14:26 +05:30
Shivam Mathur
5a15252e66
Fix docs workflow 2020-12-01 08:48:41 +05:30
Shivam Mathur
31fa0d7883
Bump version to 2.8.0 2020-11-20 08:39:41 +05:30
Shivam Mathur
385e3b6e96
Revert "Remove dashes from step ids"
This reverts commit 4d5f03db8a.
2020-11-20 08:39:37 +05:30
Shivam Mathur
68fbd80105
Add workflow to add default extensions on wiki 2020-11-02 04:47:28 +05:30
Shivam Mathur
215b040f0d
Fix contribution docs 2020-10-31 14:55:27 +05:30
Shivam Mathur
8816b6ff48
Add PHP 8.1 to the main workflow 2020-10-18 19:41:54 +05:30
Shivam Mathur
465e63b28c
Bump version to 2.6.0 2020-10-15 14:16:21 +05:30
Shivam Mathur
16b0a25bf6
Bump version to 2.5.0 2020-10-15 14:16:10 +05:30
Shivam Mathur
83bdf158fa
Fix coverage message in node workflow 2020-08-02 19:09:46 +05:30
Shivam Mathur
9e22b87414
Bump supported version in SECURITY.md 2020-07-21 16:12:05 +05:30
Shivam Mathur
a965723128
Set memory_limit=-1 on Windows and macOS 2020-07-18 06:01:48 +05:30
Shivam Mathur
d313593fee
Bump cache key 2020-07-08 06:44:18 +05:30
Shivam Mathur
5753a00ef5
Improve composer setup 2020-07-08 05:20:52 +05:30
Shivam Mathur
2907f8a584
Remove dashes from step ids 2020-06-22 07:33:15 +05:30
Shivam Mathur
b9404683e1
Improve extension support 2020-06-22 07:33:08 +05:30
Shivam Mathur
65e65163cd
Bump version to 2.3.0 2020-06-11 16:10:14 +05:30
Shivam Mathur
41397ce45e
Update docs 2020-06-11 16:10:09 +05:30
Shivam Mathur
4f0d9003dc
Add Ubuntu 20.04 to CI 2020-06-04 08:40:45 +05:30
Shivam Mathur
03eb8cc744
Update actions/cache uses to v2 2020-06-03 01:56:43 +05:30
Shivam Mathur
c30a9630bb
Housekeeping 2020-05-16 11:28:01 +05:30