Commit Graph

50 Commits

Author SHA1 Message Date
Angular Robot 13e89bcbd7 build: update scorecard action dependencies (#53607)
See associated pull request for more information.

PR Close #53607
2023-12-18 15:32:03 +00:00
Angular Robot 6dc6471e75 build: update scorecard action dependencies (#52126)
See associated pull request for more information.

PR Close #52126
2023-10-18 17:45:28 +02:00
Angular Robot 5464bea73c build: update github/codeql-action action to v2.21.9 (#51992)
See associated pull request for more information.

PR Close #51992
2023-10-05 14:07:21 -07:00
Angular Robot acfea3cbe3 build: update scorecard action dependencies (#51899)
See associated pull request for more information.

PR Close #51899
2023-09-27 09:24:19 -07:00
Angular Robot e5a0116575 build: update scorecard action dependencies (#51817)
See associated pull request for more information.

PR Close #51817
2023-09-19 12:18:24 +02:00
Angular Robot 6fed684301 build: update github/codeql-action action to v2.21.0 (#51077)
See associated pull request for more information.

PR Close #51077
2023-07-20 19:57:22 +00:00
Angular Robot 6cac41f039 build: update github/codeql-action action to v2.20.3 (#50930)
See associated pull request for more information.

PR Close #50930
2023-07-13 09:33:53 -07:00
Angular Robot 471cdff082 build: update scorecard action dependencies (#50880)
See associated pull request for more information.

PR Close #50880
2023-06-30 11:42:48 -07:00
Angular Robot 7f4a7b4ea2 build: update github/codeql-action action to v2.20.0 (#50774)
See associated pull request for more information.

PR Close #50774
2023-06-20 14:55:36 +02:00
Angular Robot 0f299c0061 build: update actions/checkout action to v3.5.3 (#50689)
See associated pull request for more information.

PR Close #50689
2023-06-13 14:48:02 +02:00
Angular Robot 22eb947db0 build: update github/codeql-action action to v2.3.6 (#50585)
See associated pull request for more information.

PR Close #50585
2023-06-06 14:13:39 -07:00
Angular Robot f5b82b54b6 build: update github/codeql-action action to v2.3.5 (#50508)
See associated pull request for more information.

PR Close #50508
2023-05-30 13:04:42 -07:00
Angular Robot 7ac8f09dd6 build: update github/codeql-action action to v2.3.3 (#50216)
See associated pull request for more information.

PR Close #50216
2023-05-09 14:48:54 -07:00
Angular Robot d0a9150be0 build: update github/codeql-action action to v2.3.2 (#50102)
See associated pull request for more information.

PR Close #50102
2023-05-02 12:29:03 +02:00
Angular Robot 316d1d0905 build: update github/codeql-action action to v2.3.0 (#49992)
See associated pull request for more information.

PR Close #49992
2023-04-26 11:28:10 -07:00
Angular Robot ec30674e20 build: update scorecard action dependencies (#49897)
See associated pull request for more information.

PR Close #49897
2023-04-18 13:58:53 +00:00
Angular Robot 85c1a6463f build: update github/codeql-action action to v2.2.11 (#49775)
See associated pull request for more information.

PR Close #49775
2023-04-12 09:26:02 -07:00
Angular Robot 12b2caad24 build: update scorecard action dependencies (#49609)
See associated pull request for more information.

PR Close #49609
2023-03-31 11:49:46 -07:00
Angular Robot f0f1e7dfa7 build: update scorecard action dependencies (#49508)
See associated pull request for more information.

PR Close #49508
2023-03-21 16:39:09 +01:00
Angular Robot de0bdeea4c build: update github/codeql-action action to v2.2.6 (#49420)
See associated pull request for more information.

PR Close #49420
2023-03-15 17:01:00 -07:00
Angular Robot 1c64e2b5ec build: update github/codeql-action action to v2.2.5 (#49242)
See associated pull request for more information.

PR Close #49242
2023-02-28 08:18:21 -08:00
Angular Robot 62453bfe7a build: update github/codeql-action action to v2.2.4 (#49055)
See associated pull request for more information.

PR Close #49055
2023-02-14 15:02:33 +01:00
Angular Robot 845ef7102b build: update github/codeql-action action to v2.2.2 (#48889)
See associated pull request for more information.

PR Close #48889
2023-02-08 15:07:06 +01:00
Angular Robot 09053f770d build: update github/codeql-action action to v2.1.39 (#48816)
See associated pull request for more information.

PR Close #48816
2023-01-24 16:43:02 +00:00
Angular Robot d47bd480c9 build: update scorecard action dependencies (#48465)
See associated pull request for more information.

PR Close #48465
2023-01-13 10:34:47 -08:00
Angular Robot 11a24c3740 build: update github/codeql-action action to v2.1.35 (#48371)
See associated pull request for more information.

PR Close #48371
2022-12-07 09:07:33 -08:00
Angular Robot d4c3584d88 build: update github/codeql-action action to v2.1.34 (#48272)
See associated pull request for more information.

PR Close #48272
2022-11-29 12:29:20 -08:00
Angular Robot 73ad3bb9c8 build: update scorecard action dependencies (#47866)
See associated pull request for more information.

PR Close #47866
2022-11-23 10:54:13 -08:00
Joey Perrott 40aad8339c ci: adjust workflow permissions for OpenSSF Scorecard results publishing (#47721)
Version 2 of the `openssf/scorecard-action` GitHub action requires the
`id-token: write` permission to publish results.

PR Close #47721
2022-10-10 22:29:01 +00:00
Angular Robot f467c9eabb build: update scorecard action dependencies (#47385)
See associated pull request for more information.

PR Close #47385
2022-10-10 20:05:23 +00:00
Angular Robot 1f23fdb03c build: update github/codeql-action action to v2.1.22 (#47223)
See associated pull request for more information.

PR Close #47223
2022-09-06 09:51:56 -07:00
Angular Robot 8546b17ade build: update github/codeql-action action to v2.1.18 (#47015)
See associated pull request for more information.

PR Close #47015
2022-08-09 10:56:00 -07:00
Angular Robot 0e3a2759b0 build: update github/codeql-action action to v2.1.16 (#46885)
See associated pull request for more information.

PR Close #46885
2022-07-19 16:05:05 +00:00
Angular Robot 42b6d23806 build: update scorecard action dependencies (#46706)
| datasource  | package               | from    | to      |
| ----------- | --------------------- | ------- | ------- |
| github-tags | github/codeql-action  | v2.1.13 | v2.1.15 |
| github-tags | ossf/scorecard-action | v1.1.1  | v1.1.2  |

PR Close #46706
2022-07-06 15:49:38 -07:00
renovate[bot] 0c9af71f80 build: update scorecard action dependencies (#46440)
PR Close #46440
2022-06-21 11:48:29 -07:00
Paul Gschwendtner 68a6a075f4 build: clean up references to old master branch (#45856)
Cleans up all references to the `master` branch we renamed to
`main` across Angular.

PR Close #45856
2022-05-04 16:23:33 -07:00
Paul Gschwendtner 0231a363fe build: preparation for primary branch rename in the Angular repos (#45681)
Preparation for the framework repo as outlined our planning
document.

PR Close #45681
2022-04-19 20:19:46 -07:00
Renovate Bot 20fbb4c35c build: update github/codeql-action action to v2.1.8 (#45542)
PR Close #45542
2022-04-11 16:22:26 +00:00
Renovate Bot 99154cfaf2 build: update github/codeql-action action to v2 (#45491)
PR Close #45491
2022-03-31 12:48:17 -07:00
Renovate Bot 3ad033c3fb build: update github/codeql-action action to v1.1.5 (#45358)
PR Close #45358
2022-03-16 11:21:45 -07:00
Renovate Bot f25c8be39e build: update scorecard action dependencies (#45249)
PR Close #45249
2022-03-08 10:31:16 -08:00
Charles Lyding 8d634ac84d ci: add permissions to current github action workflows (#45177)
The currently recommended best practice for Github action workflows is to set top-level permissions to read only. And if the job uses the automatic `GITHUB_TOKEN`, fine-grained permissions for each job based on the job's requirements should also be added.
All existing workflows in the repository now have top-level read only permission blocks.
Only the `scorecard` workflow currently requires additional job level permissions and the minimum set of permissions were already present for the job.

PR Close #45177
2022-02-24 21:39:38 +00:00
Renovate Bot 8eb82884bb build: update github/codeql-action action to v1.1.3 (#45188)
PR Close #45188
2022-02-24 17:11:16 +00:00
Charles Lyding 2e7e46f1b6 ci: use renovate Github Action tag version pinning (#45178)
Renovate supports using hashed version pinning for individual Github actions while still following SemVer-based tags.
All workflow actions external to the Angular organization now leverage this support to ensure both that stable versions of the actions are used and that the actions are pinned to a hashed version of the tag.

PR Close #45178
2022-02-23 13:02:47 -08:00
Renovate Bot bd168fc0c3 build: update ossf/scorecard-action commit hash to 3662744 (#45162)
PR Close #45162
2022-02-22 12:48:11 -08:00
Renovate Bot 5957ff4163 build: update scorecard action dependencies to 040feef (#45135)
PR Close #45135
2022-02-18 13:57:03 -08:00
Renovate Bot db4a658beb build: update scorecard action dependencies to c4e058a (#45036)
PR Close #45036
2022-02-16 13:52:24 -08:00
Renovate Bot b8f8e8cf63 build: update scorecard action dependencies to 7f9dca2 (#45026)
PR Close #45026
2022-02-09 10:21:47 -08:00
Renovate Bot 226cb0878d build: update scorecard action dependencies to 230611d (#45012)
PR Close #45012
2022-02-08 11:15:36 -08:00
Joey Perrott f22bb74d39 build: setup OpenSSF Scorecard (#44960)
Set up OpenSSF Scorecard to begin tracking security metrics within the repo.

PR Close #44960
2022-02-03 14:50:22 -08:00