naveensrinivasan
|
7566b4b867
|
Set permissions for GitHub actions
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)
> Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
https://www.legitsecurity.com/blog/github-privilege-escalation-vulnerability
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
|
2022-04-06 00:42:28 +00:00 |
|
dependabot[bot]
|
0491d78681
|
Bump actions/checkout from 2.4.0 to 3
Bumps [actions/checkout](https://github.com/actions/checkout) from 2.4.0 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2.4.0...v3)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-03-02 00:23:56 +00:00 |
|
Peter Goldstein
|
2a231cb8ef
|
Add Ruby 3.1 to the CI matrix
Also removes an unneeded bundle install step
|
2022-02-13 07:49:39 -08:00 |
|
geemus
|
82e14de7c6
|
add truffle-ruby to allowed errors
|
2021-11-17 20:43:06 -06:00 |
|
Igor Victor
|
ff982f4389
|
Update ruby.yml
|
2021-11-13 14:06:02 +01:00 |
|
dependabot[bot]
|
5079dbeb09
|
Bump actions/checkout from 2.3.5 to 2.4.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 2.3.5 to 2.4.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2.3.5...v2.4.0)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-11-03 00:23:52 +00:00 |
|
dependabot[bot]
|
711c6238fa
|
Bump actions/checkout from 2.3.4 to 2.3.5
Bumps [actions/checkout](https://github.com/actions/checkout) from 2.3.4 to 2.3.5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2.3.4...v2.3.5)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-10-18 00:44:51 +00:00 |
|
dependabot[bot]
|
ea4349929b
|
Bump actions/checkout from 2 to 2.3.4
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 2.3.4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v2.3.4)
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-05-12 06:07:38 +00:00 |
|
geemus
|
75d6399838
|
focus github action tests on supported ruby versions
|
2021-03-22 15:54:57 -05:00 |
|
geemus
|
456051fd8a
|
tweak action ci to use edge gemfile
|
2021-03-21 10:55:41 -05:00 |
|
geemus
|
bdc20138da
|
focus on ruby v2.3+ for github action tests
|
2021-03-21 09:56:34 -05:00 |
|
geemus
|
ddd4e4224c
|
add github actions and dependabot config
|
2021-03-21 09:38:38 -05:00 |
|