Reusable workflows #33
Conversation
|
Thanks for opening this pull request!. We should be by to give feedback soon. In the meantime, please check out the contributing guidelines. |
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| uses: wabarc/.github/.github/workflows/reusable-trivy.yml@main | ||
| permissions: | ||
| contents: read # for actions/checkout to fetch code | ||
| security-events: write # for github/codeql-action/upload-sarif to upload SARIF results |
Check failure
Code scanning / Scorecard
Token-Permissions
| github.ref == 'refs/heads/main' | ||
| permissions: | ||
| # Needed to upload the results to code-scanning dashboard. | ||
| security-events: write |
Check failure
Code scanning / Scorecard
Token-Permissions
| codeql: | ||
| name: CodeQL | ||
| permissions: | ||
| security-events: write |
Check failure
Code scanning / Scorecard
Token-Permissions
| uses: wabarc/.github/.github/workflows/reusable-semgrep.yml@main | ||
| permissions: | ||
| # Needed to upload the results to code-scanning dashboard. | ||
| security-events: write |
Check failure
Code scanning / Scorecard
Token-Permissions
| archive-is/* | ||
| needs: [ build ] | ||
| permissions: | ||
| contents: write |
Check failure
Code scanning / Scorecard
Token-Permissions
| - name: Set up Tor | ||
| uses: tor-actions/setup-tor@main | ||
| - name: Set up Tor | ||
| uses: tor-actions/setup-tor@main |
Check warning
Code scanning / Scorecard
Pinned-Dependencies
| daemon: true | ||
| port: 9050 | ||
| - name: Set up Tor | ||
| uses: tor-actions/setup-tor@main |
Check warning
Code scanning / Scorecard
Pinned-Dependencies
Description
Migrate reusable workflow
Related to wabarc/.github#1
Checklist