Skip to content

v1.0.0

Choose a tag to compare

@valuecodes valuecodes released this 31 Oct 14:31

The repo is now valuecodes/maintain-kit, and secret scanning has its own reusable workflow, secret-scan.yml, which runs gitleaks at the version pinned here over the caller's full history. The dashboard and the update PRs no longer know about gitleaks: the gitleaks-script input, the gitleaks section and the gitleaks update kind are gone.

⚠ Breaking changes

GitHub does not redirect uses: references of a renamed repository, so every caller fails until it re-pins. In each caller:

  1. Change uses: to valuecodes/maintain-kit/.github/workflows/dashboard.yml@<sha>, updates.yml@<sha> and workflow-lint.yml@<sha>, pinned to this release's commit.
  2. Remove the gitleaks-script input if passed; an unknown input fails the call.
  3. Add a secret-scan job that calls secret-scan.yml@<sha> with contents: read, delete the repo's own gitleaks script, and run a local gitleaks in the pre-commit hook.
  4. Name the caller jobs maintain-kit-dashboard and maintain-kit-updates (as in the README snippets), so the runs read maintain-kit-dashboard / update-issue and maintain-kit-updates / <kind>; the PR check is secret-scan / gitleaks.
  5. Close the old "Maintenance dashboard" issue and the open maintenance-updates/* PRs and delete those branches; the next run opens their replacements under the new label (maintain-kit-dashboard, maintain-kit-updates), branch (maintain-kit/<kind>) and marker.

Features

  • Move secret scanning to its own workflow and rename the repo to maintain-kit by @valuecodes in #30

Full Changelog: v0.8.0...v1.0.0