Merge branch 'main' of https://github.com/CUBETIQ/calpine-node
This commit is contained in:
commit
939c70e7df
6
.github/workflows/codacy.yml
vendored
6
.github/workflows/codacy.yml
vendored
@ -35,11 +35,11 @@ jobs:
|
|||||||
steps:
|
steps:
|
||||||
# Checkout the repository to the GitHub Actions runner
|
# Checkout the repository to the GitHub Actions runner
|
||||||
- name: Checkout code
|
- name: Checkout code
|
||||||
uses: actions/checkout@v2
|
uses: actions/checkout@v3
|
||||||
|
|
||||||
# Execute Codacy Analysis CLI and generate a SARIF output with the security issues identified during the analysis
|
# Execute Codacy Analysis CLI and generate a SARIF output with the security issues identified during the analysis
|
||||||
- name: Run Codacy Analysis CLI
|
- name: Run Codacy Analysis CLI
|
||||||
uses: codacy/codacy-analysis-cli-action@d840f886c4bd4edc059706d09c6a1586111c540b
|
uses: codacy/codacy-analysis-cli-action@9acc82f5c4d097d191a50b89b4a447207d280b14
|
||||||
with:
|
with:
|
||||||
# Check https://github.com/codacy/codacy-analysis-cli#project-token to get your project token from your Codacy repository
|
# Check https://github.com/codacy/codacy-analysis-cli#project-token to get your project token from your Codacy repository
|
||||||
# You can also omit the token and run the tools that support default configurations
|
# You can also omit the token and run the tools that support default configurations
|
||||||
@ -55,6 +55,6 @@ jobs:
|
|||||||
|
|
||||||
# Upload the SARIF file generated in the previous step
|
# Upload the SARIF file generated in the previous step
|
||||||
- name: Upload SARIF results file
|
- name: Upload SARIF results file
|
||||||
uses: github/codeql-action/upload-sarif@v1
|
uses: github/codeql-action/upload-sarif@v2
|
||||||
with:
|
with:
|
||||||
sarif_file: results.sarif
|
sarif_file: results.sarif
|
||||||
|
6
.github/workflows/snyk-container.yml
vendored
6
.github/workflows/snyk-container.yml
vendored
@ -26,14 +26,14 @@ jobs:
|
|||||||
snyk:
|
snyk:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v2
|
- uses: actions/checkout@v3
|
||||||
- name: Build a Docker image
|
- name: Build a Docker image
|
||||||
run: docker build -t your/image-to-test .
|
run: docker build -t your/image-to-test .
|
||||||
- name: Run Snyk to check Docker image for vulnerabilities
|
- name: Run Snyk to check Docker image for vulnerabilities
|
||||||
# Snyk can be used to break the build when it detects vulnerabilities.
|
# Snyk can be used to break the build when it detects vulnerabilities.
|
||||||
# In this case we want to upload the issues to GitHub Code Scanning
|
# In this case we want to upload the issues to GitHub Code Scanning
|
||||||
continue-on-error: true
|
continue-on-error: true
|
||||||
uses: snyk/actions/docker@14818c4695ecc4045f33c9cee9e795a788711ca4
|
uses: snyk/actions/docker@806182742461562b67788a64410098c9d9b96adb
|
||||||
env:
|
env:
|
||||||
# In order to use the Snyk Action you will need to have a Snyk API token.
|
# In order to use the Snyk Action you will need to have a Snyk API token.
|
||||||
# More details in https://github.com/snyk/actions#getting-your-snyk-token
|
# More details in https://github.com/snyk/actions#getting-your-snyk-token
|
||||||
@ -43,6 +43,6 @@ jobs:
|
|||||||
image: your/image-to-test
|
image: your/image-to-test
|
||||||
args: --file=Dockerfile
|
args: --file=Dockerfile
|
||||||
- name: Upload result to GitHub Code Scanning
|
- name: Upload result to GitHub Code Scanning
|
||||||
uses: github/codeql-action/upload-sarif@v1
|
uses: github/codeql-action/upload-sarif@v2
|
||||||
with:
|
with:
|
||||||
sarif_file: snyk.sarif
|
sarif_file: snyk.sarif
|
||||||
|
6
renovate.json
Normal file
6
renovate.json
Normal file
@ -0,0 +1,6 @@
|
|||||||
|
{
|
||||||
|
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
|
||||||
|
"extends": [
|
||||||
|
"config:base"
|
||||||
|
]
|
||||||
|
}
|
Loading…
Reference in New Issue
Block a user