Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Github actions updates and setup dependabot #8624

Merged
merged 6 commits into from
Jul 1, 2022
Merged

Github actions updates and setup dependabot #8624

merged 6 commits into from
Jul 1, 2022

Commits on Jun 30, 2022

  1. github: actions/checkout v2 -> v3

    @mcspr
    mcspr committed Jun 30, 2022
    Configuration menu
    Copy the full SHA
    f7e720e View commit details
    Browse the repository at this point in the history

  2. github: actions/cache v2 -> v3

    @mcspr
    mcspr committed Jun 30, 2022
    Configuration menu
    Copy the full SHA
    446620c View commit details
    Browse the repository at this point in the history

  3. github: actions/setup-python v2 -> v4

    @mcspr
    mcspr committed Jun 30, 2022
    Configuration menu
    Copy the full SHA
    74dd679 View commit details
    Browse the repository at this point in the history

  4. github: dependabot for actions

    @mcspr
    mcspr committed Jun 30, 2022
    Configuration menu
    Copy the full SHA
    335f9a8 View commit details
    Browse the repository at this point in the history

  5. github: 'restricted' mode for token permissions 

    noticed at https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

whenever external action uses our token, overall workflow 'permissions:' apply
https://docs.github.com/en/actions/security-guides/automatic-token-authentication
https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token

ref. apps documentation to understand which permissions API endpoints need
https://docs.github.com/en/rest/overview/permissions-required-for-github-apps
    @mcspr
    mcspr committed Jun 30, 2022
    Configuration menu
    Copy the full SHA
    40c1e89 View commit details
    Browse the repository at this point in the history

  6. missed tag-to-draft action

    @mcspr
    mcspr committed Jun 30, 2022
    Configuration menu
    Copy the full SHA
    dfd8d42 View commit details
    Browse the repository at this point in the history