From e4237b0adc765ad2e36975275452255c3bcfe2ca Mon Sep 17 00:00:00 2001 From: nickshoust-wf Date: Tue, 2 Apr 2024 15:36:33 -0400 Subject: [PATCH 1/4] produce and upload SBOM --- .github/workflows/dart_ci.yaml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/.github/workflows/dart_ci.yaml b/.github/workflows/dart_ci.yaml index 4f95e63..3415c83 100644 --- a/.github/workflows/dart_ci.yaml +++ b/.github/workflows/dart_ci.yaml @@ -5,10 +5,17 @@ on: branches: - 'master' - 'test_consume_*' + tags: + - '**' pull_request: branches: - '**' +permissions: + pull-requests: write + contents: write + id-token: write + jobs: test: runs-on: ubuntu-latest @@ -30,3 +37,8 @@ jobs: run: dart analyze - name: Run tests run: dart test + - uses: anchore/sbom-action@v0 + if: ${{ matrix.sdk == '2.18.7' }} + with: + path: ./ + format: cyclonedx-json From 519e56bd18a679589afbd2a8ce15431a6f89cafa Mon Sep 17 00:00:00 2001 From: nickshoust-wf Date: Tue, 2 Apr 2024 15:36:42 -0400 Subject: [PATCH 2/4] Delete skynet.yaml --- skynet.yaml | 13 ------------- 1 file changed, 13 deletions(-) delete mode 100644 skynet.yaml diff --git a/skynet.yaml b/skynet.yaml deleted file mode 100644 index 025d119..0000000 --- a/skynet.yaml +++ /dev/null @@ -1,13 +0,0 @@ -name: verify-github-actions -description: Verify that the github actions run passed, this is needed to make pipelines pass without manual intervention -contact: 'Frontend Frameworks Architecture / #support-frontend-architecture' -image: drydock.workiva.net/workiva/skynet-images:3728345 # Uses the image from this branch: https://github.com/Workiva/skynet-images/pull/127 -size: small -timeout: 600 - -env: -# encrypted github token used for requests to api.github.com - - secure: ziofu7SNe0SIrtW8rv6EwRxdEnrmo3O5kXPrnz6vewOocINQoH7xUiuFHpOwEjidubemsrODoEp8g3DjLP6JmPAmhp4= - -scripts: - - python3 /actions/verify_github_actions.py From e5cd8b83b6b2247dc3fc0f80a30c429e8c11c29b Mon Sep 17 00:00:00 2001 From: nickshoust-wf Date: Tue, 2 Apr 2024 15:37:03 -0400 Subject: [PATCH 3/4] Delete Dockerfile --- Dockerfile | 6 ------ 1 file changed, 6 deletions(-) delete mode 100644 Dockerfile diff --git a/Dockerfile b/Dockerfile deleted file mode 100644 index ce92bed..0000000 --- a/Dockerfile +++ /dev/null @@ -1,6 +0,0 @@ -FROM drydock-prod.workiva.net/workiva/dart2_base_image:2 - -WORKDIR /build/ -ADD pubspec.yaml /build -RUN dart pub get -FROM scratch From cf2f64cf93316a815910f1491498b3c2cd7d610d Mon Sep 17 00:00:00 2001 From: nickshoust-wf Date: Wed, 3 Apr 2024 08:23:18 -0400 Subject: [PATCH 4/4] just use dart 2.19.6 --- .github/workflows/dart_ci.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/dart_ci.yaml b/.github/workflows/dart_ci.yaml index 3415c83..d16af51 100644 --- a/.github/workflows/dart_ci.yaml +++ b/.github/workflows/dart_ci.yaml @@ -22,7 +22,7 @@ jobs: strategy: fail-fast: false matrix: - sdk: [ 2.13.4, 2.18.7 ] + sdk: [ 2.19.6 ] steps: - uses: actions/checkout@v2 - uses: dart-lang/setup-dart@v1 @@ -32,13 +32,13 @@ jobs: run: dart pub get - name: Check formatting run: dart format --set-exit-if-changed . - if: ${{ matrix.sdk == '2.18.7' }} + if: ${{ matrix.sdk == '2.19.6' }} - name: Analyze project source run: dart analyze - name: Run tests run: dart test - uses: anchore/sbom-action@v0 - if: ${{ matrix.sdk == '2.18.7' }} + if: ${{ matrix.sdk == '2.19.6' }} with: path: ./ format: cyclonedx-json