Compare commits
7 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| a94d765cca | |||
| 0d4708bf11 | |||
| f2b070e201 | |||
| 8176f91d4c | |||
| d68bb35e7a | |||
| 10c70f8bf9 | |||
| 28b9061756 |
@@ -0,0 +1,13 @@
|
|||||||
|
name: Security
|
||||||
|
on:
|
||||||
|
push:
|
||||||
|
branches: [main, master]
|
||||||
|
pull_request:
|
||||||
|
schedule:
|
||||||
|
- cron: '0 6 * * 1'
|
||||||
|
workflow_dispatch:
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
scan:
|
||||||
|
uses: JonKazama-Hellion/security-workflows/.gitea/workflows/security-scan.yml@main
|
||||||
|
|
||||||
@@ -16,7 +16,7 @@ jobs:
|
|||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
|
||||||
|
|
||||||
- name: Projektstruktur prüfen
|
- name: Projektstruktur prüfen
|
||||||
run: |
|
run: |
|
||||||
|
|||||||
@@ -15,7 +15,7 @@ jobs:
|
|||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
|
||||||
|
|
||||||
- name: Extract version from tag
|
- name: Extract version from tag
|
||||||
id: version
|
id: version
|
||||||
|
|||||||
@@ -20,7 +20,7 @@ jobs:
|
|||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
|
||||||
|
|
||||||
- name: Initialize CodeQL
|
- name: Initialize CodeQL
|
||||||
uses: github/codeql-action/init@v3
|
uses: github/codeql-action/init@v3
|
||||||
@@ -36,7 +36,7 @@ jobs:
|
|||||||
if: github.event_name == 'pull_request'
|
if: github.event_name == 'pull_request'
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
|
||||||
|
|
||||||
- name: Dependency Review
|
- name: Dependency Review
|
||||||
uses: actions/dependency-review-action@v4
|
uses: actions/dependency-review-action@v4
|
||||||
|
|||||||
+5
-3
@@ -26,8 +26,10 @@
|
|||||||
},
|
},
|
||||||
{
|
{
|
||||||
"description": "TypeScript type definitions stay grouped with each other",
|
"description": "TypeScript type definitions stay grouped with each other",
|
||||||
"matchPackagePrefixes": ["@types/"],
|
"groupName": "type definitions",
|
||||||
"groupName": "type definitions"
|
"matchPackageNames": [
|
||||||
|
"@types/{/,}**"
|
||||||
|
]
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"description": "Dev dependencies in their own group",
|
"description": "Dev dependencies in their own group",
|
||||||
@@ -51,4 +53,4 @@
|
|||||||
"commitMessageAction": "Refresh"
|
"commitMessageAction": "Refresh"
|
||||||
},
|
},
|
||||||
"osvVulnerabilityAlerts": true
|
"osvVulnerabilityAlerts": true
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user