e7ba3f65e8
chore(deps): update actions/cache digest to a3f5edc ( #121 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-06 13:59:08 -07:00
e52fe0bae5
chore: I don't think we use that permission? ( #123 )
...
I don't think we use that permission?
Signed-off-by: Justin Abrahms <jabrahms@ebay.com>
2022-10-06 15:01:55 -04:00
73cc784491
chore: [StepSecurity] ci: Harden GitHub Actions ( #120 )
...
* [StepSecurity] ci: Harden GitHub Actions in release.yml
* [StepSecurity] ci: Harden GitHub Actions in static-code-scanning.yaml
* [StepSecurity] ci: Harden GitHub Actions in lint-pr.yml
* [StepSecurity] ci: Harden GitHub Actions in merge.yml
* [StepSecurity] ci: Harden GitHub Actions in pullrequest.yml
2022-10-06 09:29:47 -07:00
3788a3be8e
chore: add SAST scanning ( #108 )
...
* add SAST scanning
Refs #84
Signed-off-by: Justin Abrahms <justin@abrah.ms>
* Java scanning only
Signed-off-by: Justin Abrahms <justin@abrah.ms>
* Try codeql on the normal build to see how much longer it is.
Signed-off-by: Justin Abrahms <justin@abrah.ms>
Signed-off-by: Justin Abrahms <justin@abrah.ms>
2022-10-05 22:06:47 -04:00
f245ef5e95
chore: fix dependabot pr titles ( #118 )
...
Signed-off-by: Todd Baert <toddbaert@gmail.com>
Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-10-05 12:09:08 -07:00
29f32939f8
chore: Write perms should be as tightly scoped as possible. ( #107 )
...
* Add a dependabot file to keep deps up to date
Signed-off-by: Justin Abrahms <justin@abrah.ms>
* Move write permissions to the specific job, rather than globally
Signed-off-by: Justin Abrahms <justin@abrah.ms>
* Run code scanning (slow auto-build) weekly
Signed-off-by: Justin Abrahms <justin@abrah.ms>
Signed-off-by: Justin Abrahms <justin@abrah.ms>
2022-10-05 15:02:59 -04:00
a79ae45a4a
chore(deps): update actions/cache action to v3 ( #101 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-01 21:11:09 -07:00
6a7012ec3f
chore(deps): update codecov/codecov-action action to v3 ( #102 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-01 15:27:22 -07:00
84f220d813
feat!: errorCode as enum, reason as string ( #80 )
...
* feat!: errorCode as enum, reason as string
- makes errorCode an enum
- makes reason a string
- adds errorMessage to resolution/evaluation details
2022-09-30 12:41:48 -04:00
f8d62eea2f
chore: add integration tests ( #77 )
...
* chore: add integration tests
Signed-off-by: Todd Baert <toddbaert@gmail.com>
* improve POM spacing
Signed-off-by: Todd Baert <toddbaert@gmail.com>
Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-09-20 09:48:34 -04:00
7e38e546b3
chore: Add release plz ( #66 )
...
* Add release plz
Signed-off-by: Todd Baert <toddbaert@gmail.com>
* Update release doc
Signed-off-by: Todd Baert <toddbaert@gmail.com>
* Add notes about adding release content
Signed-off-by: Todd Baert <toddbaert@gmail.com>
Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-09-13 11:36:42 -07:00
0d6ae8c132
use mvn version to remove -SNAPSHOT, bump 0.1.1
...
Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-09-03 21:06:27 -04:00
68bc16b3c6
Clean before deploy in snapshots
...
Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-08-30 10:05:13 -04:00
a38c2d2321
Sign in deploy phase, clean before deploy
...
Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-08-30 10:02:43 -04:00
56ca085dd8
We shouldn't need to verify again, since it was done in a previous step and the artifact is still around
2022-08-29 14:14:53 -07:00
b5687268d7
Does the filesystem persist across steps?
2022-08-29 14:08:37 -07:00
171f7f33f3
not snapshots
2022-08-29 13:58:13 -07:00
852de680cf
ls build dir?
2022-08-29 13:55:44 -07:00
3886182440
jar dir
2022-08-29 13:53:51 -07:00
b2c986f258
Indentation
2022-08-29 13:51:23 -07:00
6a85cd328f
Verify the snapshot?
2022-08-29 13:47:41 -07:00
fe2a361e05
Pass codecov token to prevent errors due to inability to do lookups
2022-08-29 13:20:41 -07:00
659075b666
Turn off pinentry for gpg, print known keys before signing.
2022-08-29 13:14:40 -07:00
f5e81e631c
Maybe signing in the first build fixes it?
2022-08-29 11:54:58 -07:00
4efb032eea
gpg namespace
2022-08-29 11:44:24 -07:00
99d43eb6db
Sign the artifact before deploying
...
I believe that the pom change makes it come after the actual push-to-sonatype step
2022-08-29 11:40:07 -07:00
a8cffb0a91
Sign in deploy phase
...
Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-08-24 11:23:44 -04:00
e391cbc337
No snapshot for deploy either
2022-08-08 20:08:26 -07:00
2c555d4075
WIP
...
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:20:29 +02:00
bab271fa25
WIP
...
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:19:26 +02:00
805740bed3
WIP
...
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:15:43 +02:00
5ae5e29437
WIP
...
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:14:11 +02:00
22e7d76fb6
WIP
...
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:12:58 +02:00
3035645e80
ignore GPG Key for fork repos
...
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:07:42 +02:00
5445a885b4
Releases don't have a snapshot version on them.
2022-06-28 14:04:38 -07:00
220c53f2d4
publish w/ settings file during merge
2022-06-24 00:30:15 -05:00
dda8b338dd
Don't specify directory. Codecov knows where to look
2022-06-24 00:26:57 -05:00
dcb7f9f634
indentation
2022-06-24 00:05:40 -05:00
d8c82be099
Add release instructions & build caches
2022-06-24 00:04:35 -05:00
f89b476db8
Sign on merge too
2022-06-23 23:56:53 -05:00
de116bd82e
Don't specify directory. I think they can find it on their own for maven?
2022-06-23 22:20:14 -05:00
de35989d29
Add gpg key
2022-06-23 22:17:33 -05:00
3db8d18c04
Remove debug
2022-06-23 22:02:08 -05:00
7b0c086f14
Debug tools
2022-06-23 21:52:23 -05:00
d64e3e3de4
See if I can root out build files
2022-06-23 21:46:30 -05:00
91c27a8ee7
Wording
2022-06-23 17:15:30 -05:00
7f829e5532
Working on release
2022-06-23 16:40:45 -05:00
e6c9ea35cd
Fix the URL again
2022-06-23 10:53:05 -05:00
4411d116f8
Fix boolean.valueof shenanigans
2022-06-23 10:49:24 -05:00
1bb5519990
Sonatype thinks that we should remove the paths
2022-06-23 10:45:23 -05:00
renovate[bot]