Commit Graph

79 Commits

Author SHA1 Message Date
Steve Riesenberg 24033be046
Skip workflows on forks of spring-security 2022-07-28 15:11:09 -05:00
Steve Riesenberg 47a5665767
Use cache and user.name system property on Windows 2022-07-28 15:11:08 -05:00
Steve Riesenberg aad60cc6af
Only run prerequisites job if on upstream repo 2022-07-28 15:11:07 -05:00
Steve Riesenberg 13e94935ae
Simplify dependency graph 2022-07-28 15:11:06 -05:00
Steve Riesenberg 6c29007fac
Use Spring Gradle Build Action
Closes gh-11630
2022-07-28 15:11:05 -05:00
Steve Riesenberg 6ad567f0fa
Polish gh-11367 2022-07-28 15:11:05 -05:00
naveen 8c634f8a9d
Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this
way, even if the attackers will succeed in compromising your workflow,
they won’t be able to do much.

- Included permissions for the action.

https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests
https://securitylab.github.com/research/github-actions-preventing-pwn-requests/

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>

Closes gh-11367
2022-07-28 15:11:04 -05:00
Steve Riesenberg fbc5839890
Build only on branches
Issue gh-11480
2022-07-18 11:46:47 -05:00
Steve Riesenberg d76c321f8c
Backport release automation and github actions
Closes gh-11500
2022-07-13 15:17:03 -05:00
Rob Winch 3d5e5ff556 Enable BackportBot on 5.7.x 2022-06-06 13:54:36 -05:00
Marcus Da Coregio 991d5c8817 Use properties in the checkSamples job
Issue gh-10344
2022-05-11 16:13:08 -03:00
Rob Winch 73dda2e192 Fix Antora for Milestone & RC
- Verify Antora display_version
- Run workflow for tags
- Allow run workflow manually

Issue gh-10765
2022-01-18 14:20:03 -06:00
Rob Winch 127e10e607 Antora Playbook 2021-11-11 13:34:54 -06:00
Josh Cummings d779cd1d48 Support Structure101 License ID
Closes gh-10443
2021-10-28 13:26:02 -06:00
Josh Cummings cb6ca7f470 GitHub Actions uses spring-builds+github user
This is more clear than spring-builds user
2021-10-26 11:25:42 -06:00
Rob Winch efb9fcfb66 Use repository_name too 2021-10-25 15:05:06 -05:00
Rob Winch cb6e64fc97 Extract Branch Name 2021-10-25 14:56:53 -05:00
Rob Winch e5747fe860 Use env.GENERATED_BRANCH_NAME 2021-10-25 14:21:55 -05:00
Rob Winch 0d4959d514 Use GENERATED_BRANCH_NAME 2021-10-25 14:15:19 -05:00
Rob Winch ce58a868c9 Use branch name instead of entire ref 2021-10-25 14:10:00 -05:00
Rob Winch 132723bc8c Use repository + ref for generated docs 2021-10-25 14:04:02 -05:00
Rob Winch 1f5ebdda97 Use github.repository 2021-10-25 13:14:04 -05:00
Rob Winch e87775bb1a GITHUB_REPOSITORY instead of env.GITHUB_REPOSITORY 2021-10-25 13:12:38 -05:00
Rob Winch 8cb36c24ba Generated docs use env 2021-10-25 13:09:06 -05:00
Rob Winch 0f4b77a52f
Use https://spring.io/security-policy 2021-10-20 09:15:29 -05:00
Rob Winch cff0bde1a3 GitHub Actions uses spring-builds+github user
This is more clear than spring-builds user
2021-09-28 15:09:03 -05:00
Josh Cummings 770c57ecc9 Add Structure101 to CI Build
Closes gh-6236
2021-09-27 16:23:19 -06:00
Rob Winch b57caf22af Use GH_ACTIONS_REPO_TOKEN 2021-09-27 13:29:29 -05:00
Rob Winch e4ce7249cc Generate antora.yml and push to spring-security-docs-generated 2021-09-23 15:50:14 -05:00
Rob Winch 59e7a10732 Add dispatch 2021-09-23 15:45:22 -05:00
Marcus Da Coregio d0fbe6b501 Update CI deployments to be dependent on Check Samples
Closes gh-10207
2021-08-19 10:13:38 -03:00
Marcus Da Coregio be91a78781 Update Check Samples job to run in parallel
Issue gh-9846
2021-08-17 11:15:10 -03:00
Rob Winch 71f1cf1e0b Remove Remaining Sonar Reference
Issue gh-10205
2021-08-16 14:45:33 -05:00
Rob Winch 829733896c Remove unused Sonar from Build
Closes gh-10205
2021-08-16 14:42:38 -05:00
Marcus Da Coregio c562d56ff4 Add checkSamples task
Closes gh-9846
2021-07-27 14:11:51 -03:00
Rob Winch e98b6c617b Add Name for Check Milestone
Issue gh-9989
2021-06-22 14:04:37 -05:00
Rob Winch 3656e08b49 Notify if Milestone Invalid
Issue gh-9989
2021-06-22 13:54:18 -05:00
Rob Winch 1545ccb406 Add milestone-spring-releasetrain.yml
Check if milestones are part of the release train

Closes gh-9989
2021-06-22 13:49:54 -05:00
Josh Cummings 98326dfae4
Use stack-workflow-status Action
Closes gh-9792
2021-06-15 13:41:11 -06:00
Marcus Hert da Coregio 2d61fda1af Combine multiple OS builds into one
Closes gh-9790
2021-05-25 10:40:28 -06:00
Marcus Hert da Coregio fa7ba5e3db Update Env Variables in Build Windows Job
Closes gh-9761
2021-05-25 10:40:28 -06:00
Josh Cummings f7f435d3f4
Include all configured branches in CI
Closes gh-9775
2021-05-18 15:57:40 -06:00
Rob Winch 081e3301ad Use GPG_PRIVATE_KEY directly
Closes gh-9776
2021-05-18 16:44:29 -05:00
Rob Winch 03924951a2 Update GitHub Actions to use publishArtifacts 2021-05-17 23:40:43 -05:00
Eleftheria Stein 8ace670479 Configure user name for Gradle CI builds
Closes gh-9747
2021-05-17 11:07:35 +02:00
Marcus Hert da Coregio 85fb9c09a5 Update Check Windows CI Workflow
- Add slack integration for error reporting
- Rename from check_windows to build_windows
- Change the build command to match the one in build_jdk_11
- Add build_windows to the needs of deployment and failure check jobs

Issue gh-9727
2021-05-14 15:07:38 -06:00
Marcus Hert da Coregio d3f5521cbf
Add New Job to Verify Windows Build on CI Workflow
Issue gh-9727
2021-05-12 14:47:52 -06:00
Josh Cummings 441b9f8187
Adjust Needs Output
- There is no need to emit the value of RUN_JOBS to the rest of the
workflow. As a boolean, it is sufficient to ask whether or not the
corresponding output is present at all
- Prerequisites is apparently easy to misspell

Issue gh-9701
2021-05-11 17:07:32 -06:00
Josh Cummings a493660cdb Stop CI Jobs on Forks
Closes gh-9701
2021-05-07 13:40:19 -06:00
Rob Winch 006b9b9607 master->main
Closes gh-9683
2021-04-26 16:55:43 -05:00