Dheeraj Oruganty
0d9e88e609
Remove SARIF reporting from ASH workflow ( #329 )
2025-09-03 16:00:26 -04:00
dependabot[bot]
169a3f84c9
chore(deps): bump tj-actions/changed-files in /.github/workflows ( #326 )
...
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files ) from 41 to 46.
- [Release notes](https://github.com/tj-actions/changed-files/releases )
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md )
- [Commits](https://github.com/tj-actions/changed-files/compare/v41...v46 )
---
updated-dependencies:
- dependency-name: tj-actions/changed-files
dependency-version: '46'
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-03 15:17:03 -04:00
Dheeraj Oruganty
c757b7f1b6
fix(agentcore-samples): Workflow CI/CD rework ( #328 )
...
* Add Ash, Dependabot, Lint check workflows for Pull Requests
* Fix ASH workflow: Use pip install and direct ash command
Based on official ASH documentation, the correct approach is:
1. Install ASH using pip (not uv tool)
2. Run ash command directly (not via uv tool run)
This follows the GitHub Actions example from the ASH documentation.
* Fix ASH workflow: Install scanner dependencies manually
- Install bandit, semgrep, detect-secrets, checkov via pip
- This ensures scanners run instead of being SKIPPED due to missing uv
* Update ASH security scan workflow with container mode and improved comment management
* Configure ASH container to show all security findings instead of limiting to 20
* Modify workflows to comment on runs
* Remove unused .ash.yaml configuration file
The ASH workflows create their own inline configurations and do not use this root config file
2025-09-03 15:11:27 -04:00
Dheeraj Oruganty
e721e7870c
feat(agentcore-samples) Add GitHub Actions CI/CD workflows with comprehensive security scanning (ASH), dependency management (Dependabot), and code quality enforcement ( #308 )
...
* Add Ash, Dependabot, Lint check workflows for Pull Requests
* Fix ASH workflow: Use pip install and direct ash command
Based on official ASH documentation, the correct approach is:
1. Install ASH using pip (not uv tool)
2. Run ash command directly (not via uv tool run)
This follows the GitHub Actions example from the ASH documentation.
* Fix ASH workflow: Install scanner dependencies manually
- Install bandit, semgrep, detect-secrets, checkov via pip
- This ensures scanners run instead of being SKIPPED due to missing uv
* Update ASH security scan workflow with container mode and improved comment management
* Configure ASH container to show all security findings instead of limiting to 20
2025-09-02 10:32:36 -04:00
Eashan Kaushik
c6cc88d508
feat(agentcore-samples): Update README.md ( #296 )
...
* Update README.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Update README.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Update README.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Update README.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Update README.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Update README.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Update README.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Update README.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Update README.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Update pull_request_template.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Update README.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Update README.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Update README.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Add files via upload
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Update llms.txt
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Delete llms.txt
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
---------
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
2025-08-27 12:04:21 -04:00
Eashan Kaushik
e8b53be65f
feat(templates): Update issue templates ( #279 )
...
* Update issue templates
* Update and rename bug-report--01-tutorials-.md to bug-report-01-tutorials.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Rename documentation-improvement--01-tutorials-.md to documentation-improvement-01-tutorials.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Create bug-report-02-usecases.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Create documentation-improvement-02-usecases.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Update documentation-improvement-01-tutorials.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Create help-needed.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Update bug-report-02-usecases.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Update pull_request_template.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Update pull_request_template.md
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
---------
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
2025-08-26 11:49:55 -04:00
Eashan Kaushik
72662f73ef
feat(Add CodeQL code scanning): Adding codeql.yml workflow( #285 )
...
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
2025-08-25 14:44:21 -04:00
Eashan Kaushik
33bb9e8de1
feat(Labeler): Add Labeler automation ( #287 )
...
* Create label.yml
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Create labeler.yml
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Update labeler.yml
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
* Update labeler.yml
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
---------
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
2025-08-25 13:57:31 -04:00
Eashan Kaushik
909eb9901a
feat(agentcore): Adding tutorials, samples, and integrations
2025-07-16 14:07:30 -04:00
