renovate[bot]
54fbf081ed
chore(deps): update actions/cache digest to 9b0c1fc ( #145 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Justin Abrahms <jabrahms@ebay.com>
2022-10-13 17:34:08 +00:00
Todd Baert
5da918205b
chore: re-enable integration tests ( #146 )
...
Update test harness and re-enable integration test profile
2022-10-13 12:55:03 -04:00
renovate[bot]
118fe7dec2
chore(deps): update actions/checkout digest to 8230315 ( #122 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-12 21:31:19 -07:00
renovate[bot]
a33030c545
chore(deps): update github/codeql-action digest to 44edb7c ( #133 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-12 21:21:04 -07:00
renovate[bot]
125b9c1bde
chore(deps): update amannn/action-semantic-pull-request digest to 7c194c2 ( #144 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-12 10:04:50 -04:00
renovate[bot]
b063a621ab
chore(deps): update amannn/action-semantic-pull-request digest to b314c1b ( #135 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Justin Abrahms <jabrahms@ebay.com>
2022-10-12 06:00:04 +00:00
renovate[bot]
90f569991b
chore(deps): update actions/setup-java digest to 3617c43 ( #132 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-11 22:51:30 -07:00
dependabot[bot]
348e3ebb96
chore: Bump actions/setup-java from e150063ee446b60ce2e35b040e81846da9001576 to a82e6d00200608b0b4c131bc9a89f7349786bd33 ( #140 )
...
chore: Bump actions/setup-java
Bumps [actions/setup-java](https://github.com/actions/setup-java ) from e150063ee446b60ce2e35b040e81846da9001576 to a82e6d00200608b0b4c131bc9a89f7349786bd33.
- [Release notes](https://github.com/actions/setup-java/releases )
- [Commits](e150063ee4...a82e6d0020 )
---
updated-dependencies:
- dependency-name: actions/setup-java
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-10 12:09:19 -07:00
dependabot[bot]
bb36557f52
chore: Bump actions/checkout from 3.0.2 to 3.1.0 ( #139 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.0.2 to 3.1.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](2541b1294d...93ea575cb5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-10 06:59:40 -07:00
renovate[bot]
5fb7c1f8be
chore(deps): update codecov/codecov-action digest to e0fbd59 ( #126 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-10 06:50:25 -07:00
renovate[bot]
64ec731068
chore(deps): update github/codeql-action digest to 3d39294 ( #127 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-07 10:23:44 +00:00
Justin Abrahms
da7a662334
chore: Remove more perms ( #130 )
2022-10-06 21:54:15 -04:00
renovate[bot]
ce89ecf1e7
chore(deps): update actions/setup-java digest to e150063 ( #125 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-06 21:02:36 +00:00
renovate[bot]
e7ba3f65e8
chore(deps): update actions/cache digest to a3f5edc ( #121 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-06 13:59:08 -07:00
Justin Abrahms
e52fe0bae5
chore: I don't think we use that permission? ( #123 )
...
I don't think we use that permission?
Signed-off-by: Justin Abrahms <jabrahms@ebay.com>
2022-10-06 15:01:55 -04:00
Step Security Bot
73cc784491
chore: [StepSecurity] ci: Harden GitHub Actions ( #120 )
...
* [StepSecurity] ci: Harden GitHub Actions in release.yml
* [StepSecurity] ci: Harden GitHub Actions in static-code-scanning.yaml
* [StepSecurity] ci: Harden GitHub Actions in lint-pr.yml
* [StepSecurity] ci: Harden GitHub Actions in merge.yml
* [StepSecurity] ci: Harden GitHub Actions in pullrequest.yml
2022-10-06 09:29:47 -07:00
Justin Abrahms
3788a3be8e
chore: add SAST scanning ( #108 )
...
* add SAST scanning
Refs #84
Signed-off-by: Justin Abrahms <justin@abrah.ms>
* Java scanning only
Signed-off-by: Justin Abrahms <justin@abrah.ms>
* Try codeql on the normal build to see how much longer it is.
Signed-off-by: Justin Abrahms <justin@abrah.ms>
Signed-off-by: Justin Abrahms <justin@abrah.ms>
2022-10-05 22:06:47 -04:00
Justin Abrahms
29f32939f8
chore: Write perms should be as tightly scoped as possible. ( #107 )
...
* Add a dependabot file to keep deps up to date
Signed-off-by: Justin Abrahms <justin@abrah.ms>
* Move write permissions to the specific job, rather than globally
Signed-off-by: Justin Abrahms <justin@abrah.ms>
* Run code scanning (slow auto-build) weekly
Signed-off-by: Justin Abrahms <justin@abrah.ms>
Signed-off-by: Justin Abrahms <justin@abrah.ms>
2022-10-05 15:02:59 -04:00
renovate[bot]
a79ae45a4a
chore(deps): update actions/cache action to v3 ( #101 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-01 21:11:09 -07:00
renovate[bot]
6a7012ec3f
chore(deps): update codecov/codecov-action action to v3 ( #102 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-01 15:27:22 -07:00
Todd Baert
84f220d813
feat!: errorCode as enum, reason as string ( #80 )
...
* feat!: errorCode as enum, reason as string
- makes errorCode an enum
- makes reason a string
- adds errorMessage to resolution/evaluation details
2022-09-30 12:41:48 -04:00
Todd Baert
f8d62eea2f
chore: add integration tests ( #77 )
...
* chore: add integration tests
Signed-off-by: Todd Baert <toddbaert@gmail.com>
* improve POM spacing
Signed-off-by: Todd Baert <toddbaert@gmail.com>
Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-09-20 09:48:34 -04:00
Todd Baert
7e38e546b3
chore: Add release plz ( #66 )
...
* Add release plz
Signed-off-by: Todd Baert <toddbaert@gmail.com>
* Update release doc
Signed-off-by: Todd Baert <toddbaert@gmail.com>
* Add notes about adding release content
Signed-off-by: Todd Baert <toddbaert@gmail.com>
Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-09-13 11:36:42 -07:00
Todd Baert
0d6ae8c132
use mvn version to remove -SNAPSHOT, bump 0.1.1
...
Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-09-03 21:06:27 -04:00
Todd Baert
68bc16b3c6
Clean before deploy in snapshots
...
Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-08-30 10:05:13 -04:00
Todd Baert
a38c2d2321
Sign in deploy phase, clean before deploy
...
Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-08-30 10:02:43 -04:00
Justin Abrahms
56ca085dd8
We shouldn't need to verify again, since it was done in a previous step and the artifact is still around
2022-08-29 14:14:53 -07:00
Justin Abrahms
b5687268d7
Does the filesystem persist across steps?
2022-08-29 14:08:37 -07:00
Justin Abrahms
171f7f33f3
not snapshots
2022-08-29 13:58:13 -07:00
Justin Abrahms
852de680cf
ls build dir?
2022-08-29 13:55:44 -07:00
Justin Abrahms
3886182440
jar dir
2022-08-29 13:53:51 -07:00
Justin Abrahms
b2c986f258
Indentation
2022-08-29 13:51:23 -07:00
Justin Abrahms
6a85cd328f
Verify the snapshot?
2022-08-29 13:47:41 -07:00
Justin Abrahms
fe2a361e05
Pass codecov token to prevent errors due to inability to do lookups
2022-08-29 13:20:41 -07:00
Justin Abrahms
659075b666
Turn off pinentry for gpg, print known keys before signing.
2022-08-29 13:14:40 -07:00
Justin Abrahms
f5e81e631c
Maybe signing in the first build fixes it?
2022-08-29 11:54:58 -07:00
Justin Abrahms
4efb032eea
gpg namespace
2022-08-29 11:44:24 -07:00
Justin Abrahms
99d43eb6db
Sign the artifact before deploying
...
I believe that the pom change makes it come after the actual push-to-sonatype step
2022-08-29 11:40:07 -07:00
Todd Baert
a8cffb0a91
Sign in deploy phase
...
Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-08-24 11:23:44 -04:00
Justin Abrahms
e391cbc337
No snapshot for deploy either
2022-08-08 20:08:26 -07:00
Thomas Poignant
2c555d4075
WIP
...
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:20:29 +02:00
Thomas Poignant
bab271fa25
WIP
...
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:19:26 +02:00
Thomas Poignant
805740bed3
WIP
...
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:15:43 +02:00
Thomas Poignant
5ae5e29437
WIP
...
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:14:11 +02:00
Thomas Poignant
22e7d76fb6
WIP
...
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:12:58 +02:00
Thomas Poignant
3035645e80
ignore GPG Key for fork repos
...
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:07:42 +02:00
Justin Abrahms
5445a885b4
Releases don't have a snapshot version on them.
2022-06-28 14:04:38 -07:00
Justin Abrahms
220c53f2d4
publish w/ settings file during merge
2022-06-24 00:30:15 -05:00
Justin Abrahms
dda8b338dd
Don't specify directory. Codecov knows where to look
2022-06-24 00:26:57 -05:00
Justin Abrahms
dcb7f9f634
indentation
2022-06-24 00:05:40 -05:00