477adb7586
ci: adjust workflow permissions for OpenSSF Scorecard results publishing ( #47721 )
...
Version 2 of the `openssf/scorecard-action` GitHub action requires the
`id-token: write` permission to publish results.
PR Close #47721
2022-10-10 22:29:01 +00:00
f791326dec
build: update scorecard action dependencies ( #47385 )
...
See associated pull request for more information.
PR Close #47385
2022-10-10 20:05:24 +00:00
0d337c9ff2
build: update github/codeql-action action to v2.1.22 ( #47223 )
...
See associated pull request for more information.
PR Close #47223
2022-09-06 09:51:56 -07:00
8546b17ade
build: update github/codeql-action action to v2.1.18 ( #47015 )
...
See associated pull request for more information.
PR Close #47015
2022-08-09 10:56:00 -07:00
0e3a2759b0
build: update github/codeql-action action to v2.1.16 ( #46885 )
...
See associated pull request for more information.
PR Close #46885
2022-07-19 16:05:05 +00:00
42b6d23806
build: update scorecard action dependencies ( #46706 )
...
| datasource | package | from | to |
| ----------- | --------------------- | ------- | ------- |
| github-tags | github/codeql-action | v2.1.13 | v2.1.15 |
| github-tags | ossf/scorecard-action | v1.1.1 | v1.1.2 |
PR Close #46706
2022-07-06 15:49:38 -07:00
0c9af71f80
build: update scorecard action dependencies ( #46440 )
...
PR Close #46440
2022-06-21 11:48:29 -07:00
68a6a075f4
build: clean up references to old master branch ( #45856 )
...
Cleans up all references to the `master` branch we renamed to
`main` across Angular.
PR Close #45856
2022-05-04 16:23:33 -07:00
0231a363fe
build: preparation for primary branch rename in the Angular repos ( #45681 )
...
Preparation for the framework repo as outlined our planning
document.
PR Close #45681
2022-04-19 20:19:46 -07:00
20fbb4c35c
build: update github/codeql-action action to v2.1.8 ( #45542 )
...
PR Close #45542
2022-04-11 16:22:26 +00:00
99154cfaf2
build: update github/codeql-action action to v2 ( #45491 )
...
PR Close #45491
2022-03-31 12:48:17 -07:00
3ad033c3fb
build: update github/codeql-action action to v1.1.5 ( #45358 )
...
PR Close #45358
2022-03-16 11:21:45 -07:00
f25c8be39e
build: update scorecard action dependencies ( #45249 )
...
PR Close #45249
2022-03-08 10:31:16 -08:00
8d634ac84d
ci: add permissions to current github action workflows ( #45177 )
...
The currently recommended best practice for Github action workflows is to set top-level permissions to read only. And if the job uses the automatic `GITHUB_TOKEN`, fine-grained permissions for each job based on the job's requirements should also be added.
All existing workflows in the repository now have top-level read only permission blocks.
Only the `scorecard` workflow currently requires additional job level permissions and the minimum set of permissions were already present for the job.
PR Close #45177
2022-02-24 21:39:38 +00:00
8eb82884bb
build: update github/codeql-action action to v1.1.3 ( #45188 )
...
PR Close #45188
2022-02-24 17:11:16 +00:00
2e7e46f1b6
ci: use renovate Github Action tag version pinning ( #45178 )
...
Renovate supports using hashed version pinning for individual Github actions while still following SemVer-based tags.
All workflow actions external to the Angular organization now leverage this support to ensure both that stable versions of the actions are used and that the actions are pinned to a hashed version of the tag.
PR Close #45178
2022-02-23 13:02:47 -08:00
bd168fc0c3
build: update ossf/scorecard-action commit hash to 3662744 ( #45162 )
...
PR Close #45162
2022-02-22 12:48:11 -08:00
5957ff4163
build: update scorecard action dependencies to 040feef ( #45135 )
...
PR Close #45135
2022-02-18 13:57:03 -08:00
db4a658beb
build: update scorecard action dependencies to c4e058a ( #45036 )
...
PR Close #45036
2022-02-16 13:52:24 -08:00
b8f8e8cf63
build: update scorecard action dependencies to 7f9dca2 ( #45026 )
...
PR Close #45026
2022-02-09 10:21:47 -08:00
226cb0878d
build: update scorecard action dependencies to 230611d ( #45012 )
...
PR Close #45012
2022-02-08 11:15:36 -08:00
f22bb74d39
build: setup OpenSSF Scorecard ( #44960 )
...
Set up OpenSSF Scorecard to begin tracking security metrics within the repo.
PR Close #44960
2022-02-03 14:50:22 -08:00
Joey Perrott