e7ba3f65e8
chore(deps): update actions/cache digest to a3f5edc ( #121 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-06 13:59:08 -07:00
e52fe0bae5
chore: I don't think we use that permission? ( #123 )
...
I don't think we use that permission?
Signed-off-by: Justin Abrahms <jabrahms@ebay.com>
2022-10-06 15:01:55 -04:00
73cc784491
chore: [StepSecurity] ci: Harden GitHub Actions ( #120 )
...
* [StepSecurity] ci: Harden GitHub Actions in release.yml
* [StepSecurity] ci: Harden GitHub Actions in static-code-scanning.yaml
* [StepSecurity] ci: Harden GitHub Actions in lint-pr.yml
* [StepSecurity] ci: Harden GitHub Actions in merge.yml
* [StepSecurity] ci: Harden GitHub Actions in pullrequest.yml
2022-10-06 09:29:47 -07:00
3788a3be8e
chore: add SAST scanning ( #108 )
...
* add SAST scanning
Refs #84
Signed-off-by: Justin Abrahms <justin@abrah.ms>
* Java scanning only
Signed-off-by: Justin Abrahms <justin@abrah.ms>
* Try codeql on the normal build to see how much longer it is.
Signed-off-by: Justin Abrahms <justin@abrah.ms>
Signed-off-by: Justin Abrahms <justin@abrah.ms>
2022-10-05 22:06:47 -04:00
29f32939f8
chore: Write perms should be as tightly scoped as possible. ( #107 )
...
* Add a dependabot file to keep deps up to date
Signed-off-by: Justin Abrahms <justin@abrah.ms>
* Move write permissions to the specific job, rather than globally
Signed-off-by: Justin Abrahms <justin@abrah.ms>
* Run code scanning (slow auto-build) weekly
Signed-off-by: Justin Abrahms <justin@abrah.ms>
Signed-off-by: Justin Abrahms <justin@abrah.ms>
2022-10-05 15:02:59 -04:00
a79ae45a4a
chore(deps): update actions/cache action to v3 ( #101 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-01 21:11:09 -07:00
6a7012ec3f
chore(deps): update codecov/codecov-action action to v3 ( #102 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-01 15:27:22 -07:00
84f220d813
feat!: errorCode as enum, reason as string ( #80 )
...
* feat!: errorCode as enum, reason as string
- makes errorCode an enum
- makes reason a string
- adds errorMessage to resolution/evaluation details
2022-09-30 12:41:48 -04:00
f8d62eea2f
chore: add integration tests ( #77 )
...
* chore: add integration tests
Signed-off-by: Todd Baert <toddbaert@gmail.com>
* improve POM spacing
Signed-off-by: Todd Baert <toddbaert@gmail.com>
Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-09-20 09:48:34 -04:00
a8cffb0a91
Sign in deploy phase
...
Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-08-24 11:23:44 -04:00
2c555d4075
WIP
...
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:20:29 +02:00
bab271fa25
WIP
...
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:19:26 +02:00
805740bed3
WIP
...
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:15:43 +02:00
5ae5e29437
WIP
...
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:14:11 +02:00
22e7d76fb6
WIP
...
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:12:58 +02:00
3035645e80
ignore GPG Key for fork repos
...
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:07:42 +02:00
dcb7f9f634
indentation
2022-06-24 00:05:40 -05:00
d8c82be099
Add release instructions & build caches
2022-06-24 00:04:35 -05:00
de116bd82e
Don't specify directory. I think they can find it on their own for maven?
2022-06-23 22:20:14 -05:00
de35989d29
Add gpg key
2022-06-23 22:17:33 -05:00
3db8d18c04
Remove debug
2022-06-23 22:02:08 -05:00
7b0c086f14
Debug tools
2022-06-23 21:52:23 -05:00
d64e3e3de4
See if I can root out build files
2022-06-23 21:46:30 -05:00
91c27a8ee7
Wording
2022-06-23 17:15:30 -05:00
7f829e5532
Working on release
2022-06-23 16:40:45 -05:00
95d012638c
-moves everything to Java 8
2022-06-21 18:52:21 +02:00
b65718fc5a
updates JDK version vor github actions to JDK 11
2022-06-20 21:48:28 +02:00
8dd71e8a9e
Add coverage validation
2022-06-14 11:34:20 -07:00
420ea3191a
Don't package repository on PR creation
2022-04-29 15:36:35 -07:00
a6279f9a7a
Fix pr builds
2022-04-29 13:53:30 -07:00
renovate[bot]