Steve Riesenberg
|
9d248c7185
|
Skip workflows on forks of spring-security
|
2022-07-28 14:17:42 -05:00 |
|
Steve Riesenberg
|
bdeb32854e
|
Use Spring Gradle Build Action
Closes gh-11630
|
2022-07-27 16:01:15 -05:00 |
naveen
|
8f93a7fc94
|
Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this
way, even if the attackers will succeed in compromising your workflow,
they won’t be able to do much.
- Included permissions for the action.
https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests
https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
|
2022-07-26 15:33:33 -05:00 |
Marcus Da Coregio
|
c4a55b90e3
|
Antora generate workflow use JDK 17
Closes gh-11430
|
2022-06-22 15:21:29 -03:00 |
|
Steve Riesenberg
|
9601efd341
|
Add gradle-build-action to GitHub Actions pipelines
Closes gh-11099
|
2022-04-14 15:05:46 -05:00 |
Rob Winch
|
b96a2ae5a6
|
Generate Antora workflow_dispatch
Issue gh-10765
|
2022-01-18 12:56:29 -06:00 |
|
Rob Winch
|
2c38bfe59c
|
Generate Antora for tags
Issue gh-10765
|
2022-01-18 12:56:06 -06:00 |
|
Rob Winch
|
4f88bb8e5f
|
Antora Playbook
|
2021-11-11 13:37:08 -06:00 |