Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(ci): improve ossf scorecard result #2685

Merged
merged 5 commits into from
Oct 25, 2023
Merged

chore(ci): improve ossf scorecard result #2685

merged 5 commits into from
Oct 25, 2023

Commits on Oct 25, 2023

  1. chore(ci): add dependabot to /examples tree 

    As it turns out, dependabot needs explicit entries for all directories
containing go.mod files

Signed-off-by: Dominic Evans <dominic.evans@uk.ibm.com>
    @dnwe
    dnwe committed Oct 25, 2023
    Configuration menu
    Copy the full SHA
    8892f3f View commit details
    Browse the repository at this point in the history

  2. chore(ci): ensure gh permissions are explicit 

    As required/recommended by OSSF scorecard, ensure that all workflows follow
the principle of least privilege and the permissions required by each workflow
job are explicitly defined.

Signed-off-by: Dominic Evans <dominic.evans@uk.ibm.com>
    @dnwe
    dnwe committed Oct 25, 2023
    Configuration menu
    Copy the full SHA
    3d56b4c View commit details
    Browse the repository at this point in the history

  3. chore(ci): ensure GH actions are pinned by hash 

    As recommendewd by OSSF scorecard, ensure GitHub Actions are pinned by
commit hash rather than just version tag

Signed-off-by: Dominic Evans <dominic.evans@uk.ibm.com>
    @dnwe
    dnwe committed Oct 25, 2023
    Configuration menu
    Copy the full SHA
    9658e0e View commit details
    Browse the repository at this point in the history

  4. chore(ci): add golangci-lint and gitleaks checks 

    Signed-off-by: Dominic Evans <dominic.evans@uk.ibm.com>
    @dnwe
    dnwe committed Oct 25, 2023
    Configuration menu
    Copy the full SHA
    8ce03ed View commit details
    Browse the repository at this point in the history

  5. chore(ci): add Dependency Review Actions 

    Ref: https://github.com/actions/dependency-review-action

Signed-off-by: Dominic Evans <dominic.evans@uk.ibm.com>
    @dnwe
    dnwe committed Oct 25, 2023
    Configuration menu
    Copy the full SHA
    25137dc View commit details
    Browse the repository at this point in the history