Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update Scorecard template #1917

Merged
merged 39 commits into from
Feb 12, 2023
Merged

Update Scorecard template #1917

merged 39 commits into from
Feb 12, 2023

Commits on Oct 21, 2022

  1. Merge pull request #1299 from Devils-Knight/fix-dependabot 

    [Feature] Create or update dependabot config based on input
    @ashishkurmi
    ashishkurmi committed Oct 21, 2022
    Configuration menu
    Copy the full SHA
    8daceb1 View commit details
    Browse the repository at this point in the history

Commits on Oct 25, 2022

  1. remediate files & packages

    @Devils-Knight
    Devils-Knight committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    7105c41 View commit details
    Browse the repository at this point in the history

Commits on Oct 26, 2022

  1. mod tidy

    @Devils-Knight
    Devils-Knight committed Oct 26, 2022
    Configuration menu
    Copy the full SHA
    b99b655 View commit details
    Browse the repository at this point in the history

Commits on Nov 4, 2022

  1. add version comment to pinned actions

    @Devils-Knight
    Devils-Knight committed Nov 4, 2022
    Configuration menu
    Copy the full SHA
    f6256ca View commit details
    Browse the repository at this point in the history

Commits on Nov 7, 2022

  1. Merge pull request #1374 from Devils-Knight/comment 

    Add version comment for pinned actions
    @varunsh-coder
    varunsh-coder committed Nov 7, 2022
    Configuration menu
    Copy the full SHA
    ffdfe27 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'int' into pr/1352

    @varunsh-coder
    varunsh-coder committed Nov 7, 2022
    Configuration menu
    Copy the full SHA
    088800b View commit details
    Browse the repository at this point in the history

  3. Merge pull request #1352 from Devils-Knight/remediation 

    [Feature] Update Packages names & locations
    @varunsh-coder
    varunsh-coder committed Nov 7, 2022
    Configuration menu
    Copy the full SHA
    3da1738 View commit details
    Browse the repository at this point in the history

Commits on Nov 9, 2022

  1. Update harden runner version

    @varunsh-coder
    varunsh-coder committed Nov 9, 2022
    Configuration menu
    Copy the full SHA
    7bcb807 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #1379 from step-security/update-harden-harden-int 

    Update harden runner version
    @varunsh-coder
    varunsh-coder committed Nov 9, 2022
    Configuration menu
    Copy the full SHA
    cc5afdc View commit details
    Browse the repository at this point in the history

Commits on Nov 19, 2022

  1. [UPDATE] Pin actions to vx.y.z format (#1469)

    @Devils-Knight
    Devils-Knight committed Nov 19, 2022
    Configuration menu
    Copy the full SHA
    b994863 View commit details
    Browse the repository at this point in the history

Commits on Nov 21, 2022

  1. Update test command

    @varunsh-coder
    varunsh-coder committed Nov 21, 2022
    Configuration menu
    Copy the full SHA
    e9482c1 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #1476 from step-security/update-workflow-test-cmd 

    Update test command
    @varunsh-coder
    varunsh-coder committed Nov 21, 2022
    Configuration menu
    Copy the full SHA
    361b35a View commit details
    Browse the repository at this point in the history

  3. Update test cases

    @varunsh-coder
    varunsh-coder committed Nov 21, 2022
    Configuration menu
    Copy the full SHA
    8e7b11c View commit details
    Browse the repository at this point in the history

  4. Merge pull request #1477 from step-security/update-tests 

    Update test cases
    @varunsh-coder
    varunsh-coder committed Nov 21, 2022
    Configuration menu
    Copy the full SHA
    4672343 View commit details
    Browse the repository at this point in the history

  5. Merge branch 'main' into int

    @varunsh-coder
    varunsh-coder committed Nov 21, 2022
    Configuration menu
    Copy the full SHA
    c096e5f View commit details
    Browse the repository at this point in the history

Commits on Nov 30, 2022

  1. update pinning remediation

    @Devils-Knight
    Devils-Knight committed Nov 30, 2022
    Configuration menu
    Copy the full SHA
    9c234e9 View commit details
    Browse the repository at this point in the history

Commits on Dec 1, 2022

  1. Return secret metadata

    @varunsh-coder
    varunsh-coder committed Dec 1, 2022
    Configuration menu
    Copy the full SHA
    a84a433 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #1597 from step-security/return-secret-metadata 

    Return secret metadata
    @varunsh-coder
    varunsh-coder committed Dec 1, 2022
    Configuration menu
    Copy the full SHA
    787f313 View commit details
    Browse the repository at this point in the history

  3. Update secrets.go

    @varunsh-coder
    varunsh-coder committed Dec 1, 2022
    Configuration menu
    Copy the full SHA
    9372c3f View commit details
    Browse the repository at this point in the history

  4. Merge pull request #1598 from step-security/return-secret-metadata 

    Clear secret value when called by user
    @varunsh-coder
    varunsh-coder committed Dec 1, 2022
    Configuration menu
    Copy the full SHA
    ea1fb43 View commit details
    Browse the repository at this point in the history

Commits on Dec 5, 2022

  1. Merge pull request #1582 from Devils-Knight/pinIssue 

    [UPDATE] Update addAction to pin Harden Runner
    @varunsh-coder
    varunsh-coder committed Dec 5, 2022
    Configuration menu
    Copy the full SHA
    7906268 View commit details
    Browse the repository at this point in the history

Commits on Dec 7, 2022

  1. configuring dependabot to use INT for upggrading dependencies

    @ashishkurmi
    ashishkurmi committed Dec 7, 2022
    Configuration menu
    Copy the full SHA
    0e48ac5 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #1618 from step-security/ak-dependabot-int 

    configuring dependabot to use INT for upggrading dependencies
    @ashishkurmi
    ashishkurmi committed Dec 7, 2022
    Configuration menu
    Copy the full SHA
    e7de507 View commit details
    Browse the repository at this point in the history

Commits on Dec 8, 2022

  1. Merge branch 'main' into int

    @varunsh-coder
    varunsh-coder committed Dec 8, 2022
    Configuration menu
    Copy the full SHA
    b57f3f7 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'main' into int

    @varunsh-coder
    varunsh-coder committed Dec 8, 2022
    Configuration menu
    Copy the full SHA
    086252d View commit details
    Browse the repository at this point in the history

Commits on Dec 10, 2022

  1. [FEATURE] Added Template and addWorkflow function to generate Codeql … 

    …Workflow (#1634)
    @Devils-Knight
    Devils-Knight committed Dec 10, 2022
    Configuration menu
    Copy the full SHA
    582a89d View commit details
    Browse the repository at this point in the history

  2. fixed typo

    @Devils-Knight
    Devils-Knight committed Dec 10, 2022
    Configuration menu
    Copy the full SHA
    ee52f8f View commit details
    Browse the repository at this point in the history

Commits on Dec 12, 2022

  1. Merge pull request #1643 from Devils-Knight/issue 

    [ISSUE] Update Names of `WorkflowParameters` struct properties to UpperCase
    @varunsh-coder
    varunsh-coder committed Dec 12, 2022
    Configuration menu
    Copy the full SHA
    ad10892 View commit details
    Browse the repository at this point in the history

Commits on Dec 14, 2022

  1. Update addworkflow.go

    @varunsh-coder
    varunsh-coder committed Dec 14, 2022
    Configuration menu
    Copy the full SHA
    23233ec View commit details
    Browse the repository at this point in the history

  2. Merge pull request #1657 from step-security/update-workflow-env 

    Update workflow template env variable
    @varunsh-coder
    varunsh-coder committed Dec 14, 2022
    Configuration menu
    Copy the full SHA
    14cc00f View commit details
    Browse the repository at this point in the history

Commits on Dec 17, 2022

  1. Update template 

    Remove harden-runner from the template. There is an option to add it later.
    @varunsh-coder
    varunsh-coder committed Dec 17, 2022
    Configuration menu
    Copy the full SHA
    1c68758 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #1667 from step-security/fix-template 

    Update template
    @varunsh-coder
    varunsh-coder committed Dec 17, 2022
    Configuration menu
    Copy the full SHA
    8fe562e View commit details
    Browse the repository at this point in the history

Commits on Jan 4, 2023

  1. [FEATURE] Added template for Dependency-review and Scorecards (#1755)

    @Devils-Knight
    Devils-Knight committed Jan 4, 2023
    Configuration menu
    Copy the full SHA
    7903c6b View commit details
    Browse the repository at this point in the history

Commits on Feb 9, 2023

  1. Merge branch 'main' into int

    @varunsh-coder
    varunsh-coder committed Feb 9, 2023
    Configuration menu
    Copy the full SHA
    559d233 View commit details
    Browse the repository at this point in the history

  2. Update expected-codeql.yml

    @varunsh-coder
    varunsh-coder committed Feb 9, 2023
    Configuration menu
    Copy the full SHA
    e0c7869 View commit details
    Browse the repository at this point in the history

  3. Update reference from Secure-Workflow to Secure-Repo (#1905)

    @Devils-Knight
    Devils-Knight committed Feb 9, 2023
    Configuration menu
    Copy the full SHA
    571b89a View commit details
    Browse the repository at this point in the history

Commits on Feb 12, 2023

  1. Merge branch 'main' into int

    @varunsh-coder
    varunsh-coder committed Feb 12, 2023
    Configuration menu
    Copy the full SHA
    0a7ecc9 View commit details
    Browse the repository at this point in the history

  2. Update scorecards.yml 

    We need to use a pinned version
    @varunsh-coder
    varunsh-coder committed Feb 12, 2023
    Configuration menu
    Copy the full SHA
    a5395f3 View commit details
    Browse the repository at this point in the history

  3. Update expected-scorecards.yml 

    Update the test file to match change in template
    @varunsh-coder
    varunsh-coder committed Feb 12, 2023
    Configuration menu
    Copy the full SHA
    8673c00 View commit details
    Browse the repository at this point in the history