Commit Graph

80 Commits

Author SHA1 Message Date
renovate[bot] 54fbf081ed
chore(deps): update actions/cache digest to 9b0c1fc (#145)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Justin Abrahms <jabrahms@ebay.com>
2022-10-13 17:34:08 +00:00
Todd Baert 5da918205b
chore: re-enable integration tests (#146)
Update test harness and re-enable integration test profile
2022-10-13 12:55:03 -04:00
renovate[bot] 118fe7dec2
chore(deps): update actions/checkout digest to 8230315 (#122)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-12 21:31:19 -07:00
renovate[bot] a33030c545
chore(deps): update github/codeql-action digest to 44edb7c (#133)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-12 21:21:04 -07:00
renovate[bot] 125b9c1bde
chore(deps): update amannn/action-semantic-pull-request digest to 7c194c2 (#144)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-12 10:04:50 -04:00
renovate[bot] b063a621ab
chore(deps): update amannn/action-semantic-pull-request digest to b314c1b (#135)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Justin Abrahms <jabrahms@ebay.com>
2022-10-12 06:00:04 +00:00
renovate[bot] 90f569991b
chore(deps): update actions/setup-java digest to 3617c43 (#132)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-11 22:51:30 -07:00
dependabot[bot] 348e3ebb96
chore: Bump actions/setup-java from e150063ee446b60ce2e35b040e81846da9001576 to a82e6d00200608b0b4c131bc9a89f7349786bd33 (#140)
chore: Bump actions/setup-java

Bumps [actions/setup-java](https://github.com/actions/setup-java) from e150063ee446b60ce2e35b040e81846da9001576 to a82e6d00200608b0b4c131bc9a89f7349786bd33.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](e150063ee4...a82e6d0020)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-10 12:09:19 -07:00
dependabot[bot] bb36557f52
chore: Bump actions/checkout from 3.0.2 to 3.1.0 (#139)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.0.2 to 3.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](2541b1294d...93ea575cb5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-10 06:59:40 -07:00
renovate[bot] 5fb7c1f8be
chore(deps): update codecov/codecov-action digest to e0fbd59 (#126)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-10 06:50:25 -07:00
renovate[bot] 64ec731068
chore(deps): update github/codeql-action digest to 3d39294 (#127)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-07 10:23:44 +00:00
Justin Abrahms da7a662334
chore: Remove more perms (#130) 2022-10-06 21:54:15 -04:00
renovate[bot] ce89ecf1e7
chore(deps): update actions/setup-java digest to e150063 (#125)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-06 21:02:36 +00:00
renovate[bot] e7ba3f65e8
chore(deps): update actions/cache digest to a3f5edc (#121)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-06 13:59:08 -07:00
Justin Abrahms e52fe0bae5
chore: I don't think we use that permission? (#123)
I don't think we use that permission?

Signed-off-by: Justin Abrahms <jabrahms@ebay.com>
2022-10-06 15:01:55 -04:00
Step Security Bot 73cc784491
chore: [StepSecurity] ci: Harden GitHub Actions (#120)
* [StepSecurity] ci: Harden GitHub Actions in release.yml

* [StepSecurity] ci: Harden GitHub Actions in static-code-scanning.yaml

* [StepSecurity] ci: Harden GitHub Actions in lint-pr.yml

* [StepSecurity] ci: Harden GitHub Actions in merge.yml

* [StepSecurity] ci: Harden GitHub Actions in pullrequest.yml
2022-10-06 09:29:47 -07:00
Justin Abrahms 3788a3be8e
chore: add SAST scanning (#108)
* add SAST scanning

Refs #84

Signed-off-by: Justin Abrahms <justin@abrah.ms>

* Java scanning only

Signed-off-by: Justin Abrahms <justin@abrah.ms>

* Try codeql on the normal build to see how much longer it is.

Signed-off-by: Justin Abrahms <justin@abrah.ms>

Signed-off-by: Justin Abrahms <justin@abrah.ms>
2022-10-05 22:06:47 -04:00
Justin Abrahms 29f32939f8
chore: Write perms should be as tightly scoped as possible. (#107)
* Add a dependabot file to keep deps up to date

Signed-off-by: Justin Abrahms <justin@abrah.ms>

* Move write permissions to the specific job, rather than globally

Signed-off-by: Justin Abrahms <justin@abrah.ms>

* Run code scanning (slow auto-build) weekly

Signed-off-by: Justin Abrahms <justin@abrah.ms>

Signed-off-by: Justin Abrahms <justin@abrah.ms>
2022-10-05 15:02:59 -04:00
renovate[bot] a79ae45a4a
chore(deps): update actions/cache action to v3 (#101)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-01 21:11:09 -07:00
renovate[bot] 6a7012ec3f
chore(deps): update codecov/codecov-action action to v3 (#102)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-01 15:27:22 -07:00
Todd Baert 84f220d813
feat!: errorCode as enum, reason as string (#80)
* feat!: errorCode as enum, reason as string

- makes errorCode an enum
- makes reason a string
- adds errorMessage to resolution/evaluation details
2022-09-30 12:41:48 -04:00
Todd Baert f8d62eea2f
chore: add integration tests (#77)
* chore: add integration tests

Signed-off-by: Todd Baert <toddbaert@gmail.com>

* improve POM spacing

Signed-off-by: Todd Baert <toddbaert@gmail.com>

Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-09-20 09:48:34 -04:00
Todd Baert 7e38e546b3
chore: Add release plz (#66)
* Add release plz

Signed-off-by: Todd Baert <toddbaert@gmail.com>

* Update release doc

Signed-off-by: Todd Baert <toddbaert@gmail.com>

* Add notes about adding release content

Signed-off-by: Todd Baert <toddbaert@gmail.com>

Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-09-13 11:36:42 -07:00
Todd Baert 0d6ae8c132
use mvn version to remove -SNAPSHOT, bump 0.1.1
Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-09-03 21:06:27 -04:00
Todd Baert 68bc16b3c6
Clean before deploy in snapshots
Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-08-30 10:05:13 -04:00
Todd Baert a38c2d2321
Sign in deploy phase, clean before deploy
Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-08-30 10:02:43 -04:00
Justin Abrahms 56ca085dd8
We shouldn't need to verify again, since it was done in a previous step and the artifact is still around 2022-08-29 14:14:53 -07:00
Justin Abrahms b5687268d7
Does the filesystem persist across steps? 2022-08-29 14:08:37 -07:00
Justin Abrahms 171f7f33f3
not snapshots 2022-08-29 13:58:13 -07:00
Justin Abrahms 852de680cf
ls build dir? 2022-08-29 13:55:44 -07:00
Justin Abrahms 3886182440
jar dir 2022-08-29 13:53:51 -07:00
Justin Abrahms b2c986f258
Indentation 2022-08-29 13:51:23 -07:00
Justin Abrahms 6a85cd328f
Verify the snapshot? 2022-08-29 13:47:41 -07:00
Justin Abrahms fe2a361e05
Pass codecov token to prevent errors due to inability to do lookups 2022-08-29 13:20:41 -07:00
Justin Abrahms 659075b666
Turn off pinentry for gpg, print known keys before signing. 2022-08-29 13:14:40 -07:00
Justin Abrahms f5e81e631c
Maybe signing in the first build fixes it? 2022-08-29 11:54:58 -07:00
Justin Abrahms 4efb032eea
gpg namespace 2022-08-29 11:44:24 -07:00
Justin Abrahms 99d43eb6db
Sign the artifact before deploying
I believe that the pom change makes it come after the actual push-to-sonatype step
2022-08-29 11:40:07 -07:00
Todd Baert a8cffb0a91
Sign in deploy phase
Signed-off-by: Todd Baert <toddbaert@gmail.com>
2022-08-24 11:23:44 -04:00
Justin Abrahms e391cbc337
No snapshot for deploy either 2022-08-08 20:08:26 -07:00
Thomas Poignant 2c555d4075 WIP
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:20:29 +02:00
Thomas Poignant bab271fa25 WIP
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:19:26 +02:00
Thomas Poignant 805740bed3 WIP
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:15:43 +02:00
Thomas Poignant 5ae5e29437 WIP
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:14:11 +02:00
Thomas Poignant 22e7d76fb6 WIP
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:12:58 +02:00
Thomas Poignant 3035645e80 ignore GPG Key for fork repos
Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>
2022-07-24 11:07:42 +02:00
Justin Abrahms 5445a885b4
Releases don't have a snapshot version on them. 2022-06-28 14:04:38 -07:00
Justin Abrahms 220c53f2d4
publish w/ settings file during merge 2022-06-24 00:30:15 -05:00
Justin Abrahms dda8b338dd
Don't specify directory. Codecov knows where to look 2022-06-24 00:26:57 -05:00
Justin Abrahms dcb7f9f634
indentation 2022-06-24 00:05:40 -05:00