Skip to content

Commit 9c42daf

Browse files
lucacomelucacome
authored
Update workflows (#59)
1 parent 8cfa402 commit 9c42daf

File tree

7 files changed

+104
-75
lines changed

7 files changed

+104
-75
lines changed

‎.github/workflows/check-dist.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
runs-on: ubuntu-24.04
3333

3434
steps:
35-
- name: Checkout repository
35+
- name: Checkout Repository
3636
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
3737

3838
- name: Set Node.js

‎.github/workflows/codeql-analysis.yml

Lines changed: 46 additions & 44 deletions
Original file line numberDiff line numberDiff line change
@@ -2,9 +2,11 @@ name: "CodeQL"
22

33
on:
44
push:
5-
branches: [ "main", "v1" ]
5+
branches:
6+
- main
67
pull_request:
7-
branches: [ "main", "v1" ]
8+
branches:
9+
- main
810
schedule:
911
- cron: '22 4 * * 1'
1012

@@ -30,50 +32,50 @@ jobs:
3032
fail-fast: false
3133
matrix:
3234
include:
33-
- language: javascript-typescript
34-
build-mode: none
35-
# CodeQL supports the following values keywords for 'language': 'c-cpp', 'csharp', 'go', 'java-kotlin', 'javascript-typescript', 'python', 'ruby', 'swift'
36-
# Use `c-cpp` to analyze code written in C, C++ or both
37-
# Use 'java-kotlin' to analyze code written in Java, Kotlin or both
38-
# Use 'javascript-typescript' to analyze code written in JavaScript, TypeScript or both
39-
# To learn more about changing the languages that are analyzed or customizing the build mode for your analysis,
40-
# see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning.
41-
# If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how
42-
# your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
35+
- language: javascript-typescript
36+
build-mode: none
37+
# CodeQL supports the following values keywords for 'language': 'c-cpp', 'csharp', 'go', 'java-kotlin', 'javascript-typescript', 'python', 'ruby', 'swift'
38+
# Use `c-cpp` to analyze code written in C, C++ or both
39+
# Use 'java-kotlin' to analyze code written in Java, Kotlin or both
40+
# Use 'javascript-typescript' to analyze code written in JavaScript, TypeScript or both
41+
# To learn more about changing the languages that are analyzed or customizing the build mode for your analysis,
42+
# see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning.
43+
# If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how
44+
# your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
4345
steps:
44-
- name: Checkout repository
45-
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
46+
- name: Checkout Repository
47+
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
4648

47-
# Initializes the CodeQL tools for scanning.
48-
- name: Initialize CodeQL
49-
uses: github/codeql-action/init@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
50-
with:
51-
languages: ${{ matrix.language }}
52-
build-mode: ${{ matrix.build-mode }}
53-
# If you wish to specify custom queries, you can do so here or in a config file.
54-
# By default, queries listed here will override any specified in a config file.
55-
# Prefix the list here with "+" to use these queries and those in the config file.
49+
# Initializes the CodeQL tools for scanning.
50+
- name: Initialize CodeQL
51+
uses: github/codeql-action/init@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
52+
with:
53+
languages: ${{ matrix.language }}
54+
build-mode: ${{ matrix.build-mode }}
55+
# If you wish to specify custom queries, you can do so here or in a config file.
56+
# By default, queries listed here will override any specified in a config file.
57+
# Prefix the list here with "+" to use these queries and those in the config file.
5658

57-
# For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
58-
# queries: security-extended,security-and-quality
59+
# For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
60+
# queries: security-extended,security-and-quality
5961

60-
# If the analyze step fails for one of the languages you are analyzing with
61-
# "We were unable to automatically build your code", modify the matrix above
62-
# to set the build mode to "manual" for that language. Then modify this step
63-
# to build your code.
64-
# ℹ️ Command-line programs to run using the OS shell.
65-
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
66-
- if: matrix.build-mode == 'manual'
67-
shell: bash
68-
run: |
69-
echo 'If you are using a "manual" build mode for one or more of the' \
70-
'languages you are analyzing, replace this with the commands to build' \
71-
'your code, for example:'
72-
echo ' make bootstrap'
73-
echo ' make release'
74-
exit 1
62+
# If the analyze step fails for one of the languages you are analyzing with
63+
# "We were unable to automatically build your code", modify the matrix above
64+
# to set the build mode to "manual" for that language. Then modify this step
65+
# to build your code.
66+
# ℹ️ Command-line programs to run using the OS shell.
67+
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
68+
- if: matrix.build-mode == 'manual'
69+
shell: bash
70+
run: |
71+
echo 'If you are using a "manual" build mode for one or more of the' \
72+
'languages you are analyzing, replace this with the commands to build' \
73+
'your code, for example:'
74+
echo ' make bootstrap'
75+
echo ' make release'
76+
exit 1
7577
76-
- name: Perform CodeQL Analysis
77-
uses: github/codeql-action/analyze@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
78-
with:
79-
category: "/language:${{matrix.language}}"
78+
- name: Perform CodeQL Analysis
79+
uses: github/codeql-action/analyze@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
80+
with:
81+
category: "/language:${{matrix.language}}"

‎.github/workflows/draft-release.yml

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,13 +7,18 @@ on:
77
tags:
88
- "v[0-9]+.[0-9]+.[0-9]+*"
99

10+
permissions:
11+
contents: read
12+
1013
jobs:
1114
draft-release:
1215
name: Create Draft Release
1316
runs-on: ubuntu-24.04
17+
permissions:
18+
contents: write
1419
if: ${{ github.event_name != 'pull_request' }}
1520
steps:
16-
- name: Checkout
21+
- name: Checkout Repository
1722
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
1823

1924
- name: Draft Release Notes

‎.github/workflows/renovate-build.yml

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -43,8 +43,7 @@ jobs:
4343
token: ${{ secrets.COMMIT_PAT }}
4444

4545
- name: Set up Node.js
46-
uses:
47-
actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
46+
uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
4847
with:
4948
node-version-file: .nvmrc
5049

‎.github/workflows/scorecards.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -26,12 +26,12 @@ jobs:
2626
actions: read
2727

2828
steps:
29-
- name: "Checkout code"
29+
- name: Checkout Repository
3030
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
3131
with:
3232
persist-credentials: false
3333

34-
- name: "Run analysis"
34+
- name: Run analysis
3535
uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
3636
with:
3737
results_file: results.sarif
@@ -53,15 +53,15 @@ jobs:
5353

5454
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
5555
# format to the repository Actions tab.
56-
- name: "Upload artifact"
56+
- name: Upload artifact
5757
uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
5858
with:
5959
name: SARIF file
6060
path: results.sarif
6161
retention-days: 5
6262

6363
# Upload the results to GitHub's code scanning dashboard.
64-
- name: "Upload to code-scanning"
64+
- name: Upload to code-scanning
6565
uses: github/codeql-action/upload-sarif@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
6666
with:
6767
sarif_file: results.sarif

0 commit comments

Comments
 (0)