dependabot[bot]
8ec78921e1
build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.3.3 to 2.4.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](https://github.com/ossf/scorecard-action/compare/v2.3.3...v2.4.0 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-08-02 17:22:58 +02:00
ColorfulRhino
b6b8a89f10
actions: Create workflow to update shell tools via auto-PR
...
Some of our scripts download tools from a repo. These can't be bumped by dependabot, so this workflow is a self-created dependabot to bump versions of those tools to stay up-to-date.
This workflow only creates a PR if the version was actually updated.
Tools currently supported:
- Shellcheck (in 2 different files)
- Shellfmt
- oci-oras
- Bat
2024-07-18 11:54:02 +02:00
ColorfulRhino
28e859f7ce
actions: forked-helper: Don't escape multiline strings
...
Not needed anymore with GITHUB_OUTPUT.
See https://github.com/orgs/community/discussions/26288#discussioncomment-3876281
Instead, use the `toJSON` function that Actions offers to convert the `event` object to JSON.
2024-07-18 11:43:38 +02:00
Igor Pecovnik
10be812ae6
actions: Remove deprecated action script command rebase
...
Not needed as it was integrated by GitHub
2024-07-11 18:02:32 +02:00
ColorfulRhino
6f664c92fd
actions: Run YAML formatter over all workflow files
2024-07-11 18:02:32 +02:00
ColorfulRhino
2a27fdd4d0
actions: Small naming changes for some steps
2024-07-11 18:02:32 +02:00
ColorfulRhino
3fff477855
actions: Introduce run names for all workflows
...
This should make viewing the Action runs in the web UI more pleasant.
2024-07-11 18:02:32 +02:00
ColorfulRhino
f0ac613ebd
actions: Add names to auto-labeler jobs
2024-07-11 18:02:32 +02:00
ColorfulRhino
a001fefc57
actions: Fix GITHUB_OUTPUT variables
2024-07-11 18:02:32 +02:00
dependabot[bot]
718aa52b17
build(deps): bump actions/upload-artifact from 4.3.3 to 4.3.4
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.3.3 to 4.3.4.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](65462800fd...0b2256b8c0
2024-07-09 06:19:56 +02:00
ColorfulRhino
0e7e76dcb1
actions: Rename PR-specific workflows with "pr-" prefix
2024-06-09 16:30:45 +00:00
ColorfulRhino
1129cf42be
actions: Combine PR labeling jobs into a single workflow
2024-06-09 16:30:45 +00:00
ColorfulRhino
ce73634bf6
actions: Don't run shellcheck if PR message or title was updated
...
Also fix typos.
2024-06-09 16:30:45 +00:00
ColorfulRhino
5d7637ca0e
actions: Don't start build workflow on PR 'reviewer_requested' trigger
...
The PR build workflow does not need to be started every time a single
reviwer is added, since requesting a review does not change the build.
If the 'Build' label was already added earlier, the build workflow will
have been started already.
2024-06-09 16:30:45 +00:00
ColorfulRhino
bc515b0cc3
actions: Move concurrency canceling to 2nd job for PR build
...
On every PR, a workflow is started to check if artifacts should be
built. This happens not only once, but many times, e.g. for every
selected reviewer. Since the workflow has `cancel-in-progress`
enabled, workflows are started and immediately cancelled by the
next one, resulting in many notifications.
Move the `cancel-in-progress` concurrency policy to the second job
which starts only after a check is done if the 'Build' label is even
active on the PR. This should greatly reduce "Workflow cancelled"
notifications via GitHub and email (if enabled by the user).
Also make wording more clear.
2024-06-09 16:30:45 +00:00
dependabot[bot]
9fa690c203
build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.3.1 to 2.3.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](https://github.com/ossf/scorecard-action/compare/v2.3.1...v2.3.3 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-05-14 06:12:51 +01:00
dependabot[bot]
327a6664a4
build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.3
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.3.1 to 4.3.3.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](5d5d22a312...65462800fd
2024-04-23 03:05:07 +08:00
dependabot[bot]
2987f3c23c
build(deps): bump pascalgn/size-label-action from 0.5.0 to 0.5.2
...
Bumps [pascalgn/size-label-action](https://github.com/pascalgn/size-label-action ) from 0.5.0 to 0.5.2.
- [Release notes](https://github.com/pascalgn/size-label-action/releases )
- [Commits](https://github.com/pascalgn/size-label-action/compare/v0.5.0...v0.5.2 )
---
updated-dependencies:
- dependency-name: pascalgn/size-label-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-23 03:04:51 +08:00
dependabot[bot]
41c909194f
build(deps): bump tj-actions/changed-files from 43 to 44
...
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files ) from 43 to 44.
- [Release notes](https://github.com/tj-actions/changed-files/releases )
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md )
- [Commits](https://github.com/tj-actions/changed-files/compare/v43...v44 )
---
updated-dependencies:
- dependency-name: tj-actions/changed-files
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-01 20:46:29 +02:00
ColorfulRhino
03c51a301a
GH Actions: Beautify kernel hardening analysis
...
GitHub job summaries do not support colored output, but the kernel hardening script is using colored output. Thus, the job summary in the Actions panel is littered with ugly characters. This commit replaces them with emojis to enhance visibility.
2024-03-26 23:26:36 +01:00
dependabot[bot]
6d482450b8
build(deps): bump tj-actions/changed-files from 42 to 43
...
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files ) from 42 to 43.
- [Release notes](https://github.com/tj-actions/changed-files/releases )
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md )
- [Commits](https://github.com/tj-actions/changed-files/compare/v42...v43 )
---
updated-dependencies:
- dependency-name: tj-actions/changed-files
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-18 19:39:18 +01:00
ColorfulRhino
00e3f44c91
GH Actions: Kernel hardening analysis: Exclude RISC-V configs
...
RISC-V is not yet supported by kernel-hardening-checker. See https://github.com/a13xp0p0v/kernel-hardening-checker/issues/56
2024-03-17 13:28:28 +00:00
ColorfulRhino
8cd1a3d15e
GH Actions: Update README.md on how to create and use ARMBIAN_SELF_DISPATCH_TOKEN
2024-03-09 20:03:52 +01:00
ColorfulRhino
d3a6e0b26f
GH Actions: forked-helper: Fix deprecated ::set-output, fix 404 link
...
::set-output has been deprecated in 2022: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
2024-03-09 20:03:52 +01:00
Igor Pecovnik
aa702a398a
GH actions: Kernel hardening analysis path and name of a tool has been changed
2024-03-08 15:56:23 +01:00
dependabot[bot]
fa3c79675a
build(deps): bump actions/upload-artifact from 4.3.0 to 4.3.1 ( #6273 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.3.0 to 4.3.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](26f96dfa69...5d5d22a312
2024-02-12 20:06:16 +01:00
Igor Pecovnik
940793f908
Enable workflow_dispatch command for labels regenerate
2024-01-30 13:17:39 +01:00
Igor Pecovnik
03299d7843
Labeler workflow fails due to insufficient permissions
...
https://github.com/crazy-max/ghaction-github-labeler/issues/184
2024-01-30 13:13:28 +01:00
dependabot[bot]
b148000043
build(deps): bump actions/upload-artifact from 4.2.0 to 4.3.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](694cdabd8b...26f96dfa69
2024-01-29 19:42:54 +01:00
dependabot[bot]
7a3babc042
build(deps): bump peter-evans/repository-dispatch from 2 to 3
...
Bumps [peter-evans/repository-dispatch](https://github.com/peter-evans/repository-dispatch ) from 2 to 3.
- [Release notes](https://github.com/peter-evans/repository-dispatch/releases )
- [Commits](https://github.com/peter-evans/repository-dispatch/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: peter-evans/repository-dispatch
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-01-29 19:42:37 +01:00
dependabot[bot]
ff463e9745
build(deps): bump actions/upload-artifact from 4.1.0 to 4.2.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](1eb3cb2b3e...694cdabd8b
2024-01-22 21:16:12 +01:00
dependabot[bot]
7cef257a55
build(deps): bump tj-actions/changed-files from 41 to 42
...
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files ) from 41 to 42.
- [Release notes](https://github.com/tj-actions/changed-files/releases )
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md )
- [Commits](https://github.com/tj-actions/changed-files/compare/v41...v42 )
---
updated-dependencies:
- dependency-name: tj-actions/changed-files
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-01-22 21:16:03 +01:00
dependabot[bot]
705aff9f98
build(deps): bump actions/upload-artifact from 4.0.0 to 4.1.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](c7d193f32e...1eb3cb2b3e
2024-01-17 22:44:26 +01:00
dependabot[bot]
1f94d714a9
build(deps): bump tj-actions/changed-files from 40 to 41 ( #6089 )
...
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files ) from 40 to 41.
- [Release notes](https://github.com/tj-actions/changed-files/releases )
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md )
- [Commits](https://github.com/tj-actions/changed-files/compare/v40...v41 )
---
updated-dependencies:
- dependency-name: tj-actions/changed-files
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-27 11:52:55 +01:00
dependabot[bot]
f782eb9647
build(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 3.1.3 to 4.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](a8a3f3ad30...c7d193f32e
2023-12-24 09:15:42 +01:00
dependabot[bot]
656f0128f8
build(deps): bump github/codeql-action from 2 to 3
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-12-24 09:15:34 +01:00
Igor
3611f6ebbe
Fix automatic labeling system due to upstream breaking change ( #6011 )
2023-12-05 12:10:35 +01:00
dependabot[bot]
bbdec2dd6e
build(deps): bump actions/labeler from 4 to 5
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 4 to 5.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](https://github.com/actions/labeler/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-12-05 00:04:35 +01:00
Gunjan Gupta
4702c9f772
Fix pr-size-labeler again as its still not working
2023-11-25 20:19:29 +01:00
Gunjan Gupta
931831622e
pr-size-labeler: add permissions to fix failure
2023-11-22 22:27:24 +01:00
Igor Pecovnik
ff198109e0
We don't need to restart kernel recompilation upon PR text changes
2023-11-21 20:22:39 +01:00
dependabot[bot]
5e1643220b
build(deps): bump pascalgn/size-label-action from 0.4.3 to 0.5.0
...
Bumps [pascalgn/size-label-action](https://github.com/pascalgn/size-label-action ) from 0.4.3 to 0.5.0.
- [Release notes](https://github.com/pascalgn/size-label-action/releases )
- [Commits](https://github.com/pascalgn/size-label-action/compare/v0.4.3...v0.5.0 )
---
updated-dependencies:
- dependency-name: pascalgn/size-label-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-11-21 14:33:43 +05:30
Igor
70832ae5a1
Improve labeling system - refactor labeling logic ( #5916 )
...
* Add label table
* Add PR size labelling
* Implement suggestings from meeting
* Add proper GitHub labeller
---------
Co-authored-by: Werner <EvilOlaf@users.noreply.github.com>
2023-11-19 22:36:06 +01:00
Igor
e4e74c245f
For getting a PR SHA, action needs to be executed from PR ( #5910 )
...
* For getting a PR SHA, action needs to be executed from PR
* Change PR compilation to label & team check
2023-11-14 16:15:47 +01:00
dependabot[bot]
967c3040cc
build(deps): bump tspascoal/get-user-teams-membership from 2 to 3
...
Bumps [tspascoal/get-user-teams-membership](https://github.com/tspascoal/get-user-teams-membership ) from 2 to 3.
- [Release notes](https://github.com/tspascoal/get-user-teams-membership/releases )
- [Commits](https://github.com/tspascoal/get-user-teams-membership/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: tspascoal/get-user-teams-membership
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-11-14 12:04:43 +01:00
Igor
47f8065d49
Enable artifacts creation at pull request ( #5804 )
...
* Add action for artifacts creation at pull request
* Run at PR comment /build and improve security
2023-11-08 16:54:04 +01:00
dependabot[bot]
2cc436b004
build(deps): bump ossf/scorecard-action from 2.3.0 to 2.3.1 ( #5874 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.3.0 to 2.3.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](https://github.com/ossf/scorecard-action/compare/v2.3.0...v2.3.1 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-31 08:02:38 +01:00
dependabot[bot]
3e3b0a0cde
build(deps): bump tj-actions/changed-files from 39 to 40 ( #5873 )
...
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files ) from 39 to 40.
- [Release notes](https://github.com/tj-actions/changed-files/releases )
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md )
- [Commits](https://github.com/tj-actions/changed-files/compare/v39...v40 )
---
updated-dependencies:
- dependency-name: tj-actions/changed-files
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-31 08:02:24 +01:00
dependabot[bot]
b7bc0015b0
build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](https://github.com/ossf/scorecard-action/compare/v2.2.0...v2.3.0 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-10-10 20:26:17 +02:00
dependabot[bot]
e13a128f78
build(deps): bump tj-actions/changed-files from 38 to 39
...
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files ) from 38 to 39.
- [Release notes](https://github.com/tj-actions/changed-files/releases )
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md )
- [Commits](https://github.com/tj-actions/changed-files/compare/v38...v39 )
---
updated-dependencies:
- dependency-name: tj-actions/changed-files
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-09-12 10:02:46 +02:00
