Commit Graph

250 Commits

Author SHA1 Message Date
ColorfulRhino
0e7e76dcb1 actions: Rename PR-specific workflows with "pr-" prefix 2024-06-09 16:30:45 +00:00
ColorfulRhino
1129cf42be actions: Combine PR labeling jobs into a single workflow 2024-06-09 16:30:45 +00:00
ColorfulRhino
ce73634bf6 actions: Don't run shellcheck if PR message or title was updated
Also fix typos.
2024-06-09 16:30:45 +00:00
ColorfulRhino
5d7637ca0e actions: Don't start build workflow on PR 'reviewer_requested' trigger
The PR build workflow does not need to be started every time a single
reviwer is added, since requesting a review does not change the build.
If the 'Build' label was already added earlier, the build workflow will
have been started already.
2024-06-09 16:30:45 +00:00
ColorfulRhino
bc515b0cc3 actions: Move concurrency canceling to 2nd job for PR build
On every PR, a workflow is started to check if artifacts should be
built. This happens not only once, but many times, e.g. for every
selected reviewer. Since the workflow has `cancel-in-progress`
enabled, workflows are started and immediately cancelled by the
next one, resulting in many notifications.
Move the `cancel-in-progress` concurrency policy to the second job
which starts only after a check is done if the 'Build' label is even
active on the PR. This should greatly reduce "Workflow cancelled"
notifications via GitHub and email (if enabled by the user).

Also make wording more clear.
2024-06-09 16:30:45 +00:00
dependabot[bot]
9fa690c203 build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.3.1 to 2.3.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/v2.3.1...v2.3.3)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-14 06:12:51 +01:00
dependabot[bot]
327a6664a4 build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.3
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.1 to 4.3.3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](5d5d22a312...65462800fd)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-23 03:05:07 +08:00
dependabot[bot]
2987f3c23c build(deps): bump pascalgn/size-label-action from 0.5.0 to 0.5.2
Bumps [pascalgn/size-label-action](https://github.com/pascalgn/size-label-action) from 0.5.0 to 0.5.2.
- [Release notes](https://github.com/pascalgn/size-label-action/releases)
- [Commits](https://github.com/pascalgn/size-label-action/compare/v0.5.0...v0.5.2)

---
updated-dependencies:
- dependency-name: pascalgn/size-label-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-23 03:04:51 +08:00
dependabot[bot]
41c909194f build(deps): bump tj-actions/changed-files from 43 to 44
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 43 to 44.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](https://github.com/tj-actions/changed-files/compare/v43...v44)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-01 20:46:29 +02:00
ColorfulRhino
03c51a301a GH Actions: Beautify kernel hardening analysis
GitHub job summaries do not support colored output, but the kernel hardening script is using colored output. Thus, the job summary in the Actions panel is littered with ugly characters. This commit replaces them with emojis to enhance visibility.
2024-03-26 23:26:36 +01:00
dependabot[bot]
6d482450b8 build(deps): bump tj-actions/changed-files from 42 to 43
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 42 to 43.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](https://github.com/tj-actions/changed-files/compare/v42...v43)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-18 19:39:18 +01:00
ColorfulRhino
00e3f44c91 GH Actions: Kernel hardening analysis: Exclude RISC-V configs
RISC-V is not yet supported by kernel-hardening-checker. See https://github.com/a13xp0p0v/kernel-hardening-checker/issues/56
2024-03-17 13:28:28 +00:00
ColorfulRhino
8cd1a3d15e GH Actions: Update README.md on how to create and use ARMBIAN_SELF_DISPATCH_TOKEN 2024-03-09 20:03:52 +01:00
ColorfulRhino
d3a6e0b26f GH Actions: forked-helper: Fix deprecated ::set-output, fix 404 link
::set-output has been deprecated in 2022: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
2024-03-09 20:03:52 +01:00
Igor Pecovnik
aa702a398a GH actions: Kernel hardening analysis path and name of a tool has been changed 2024-03-08 15:56:23 +01:00
dependabot[bot]
fa3c79675a
build(deps): bump actions/upload-artifact from 4.3.0 to 4.3.1 (#6273)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.0 to 4.3.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](26f96dfa69...5d5d22a312)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-12 20:06:16 +01:00
Igor Pecovnik
940793f908
Enable workflow_dispatch command for labels regenerate 2024-01-30 13:17:39 +01:00
Igor Pecovnik
03299d7843 Labeler workflow fails due to insufficient permissions
https://github.com/crazy-max/ghaction-github-labeler/issues/184
2024-01-30 13:13:28 +01:00
dependabot[bot]
b148000043 build(deps): bump actions/upload-artifact from 4.2.0 to 4.3.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](694cdabd8b...26f96dfa69)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-29 19:42:54 +01:00
dependabot[bot]
7a3babc042 build(deps): bump peter-evans/repository-dispatch from 2 to 3
Bumps [peter-evans/repository-dispatch](https://github.com/peter-evans/repository-dispatch) from 2 to 3.
- [Release notes](https://github.com/peter-evans/repository-dispatch/releases)
- [Commits](https://github.com/peter-evans/repository-dispatch/compare/v2...v3)

---
updated-dependencies:
- dependency-name: peter-evans/repository-dispatch
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-29 19:42:37 +01:00
dependabot[bot]
ff463e9745 build(deps): bump actions/upload-artifact from 4.1.0 to 4.2.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](1eb3cb2b3e...694cdabd8b)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-22 21:16:12 +01:00
dependabot[bot]
7cef257a55 build(deps): bump tj-actions/changed-files from 41 to 42
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 41 to 42.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](https://github.com/tj-actions/changed-files/compare/v41...v42)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-22 21:16:03 +01:00
dependabot[bot]
705aff9f98 build(deps): bump actions/upload-artifact from 4.0.0 to 4.1.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](c7d193f32e...1eb3cb2b3e)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-17 22:44:26 +01:00
dependabot[bot]
1f94d714a9
build(deps): bump tj-actions/changed-files from 40 to 41 (#6089)
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 40 to 41.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](https://github.com/tj-actions/changed-files/compare/v40...v41)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-27 11:52:55 +01:00
dependabot[bot]
f782eb9647 build(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.3 to 4.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](a8a3f3ad30...c7d193f32e)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-24 09:15:42 +01:00
dependabot[bot]
656f0128f8 build(deps): bump github/codeql-action from 2 to 3
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-24 09:15:34 +01:00
Igor
3611f6ebbe
Fix automatic labeling system due to upstream breaking change (#6011) 2023-12-05 12:10:35 +01:00
dependabot[bot]
bbdec2dd6e build(deps): bump actions/labeler from 4 to 5
Bumps [actions/labeler](https://github.com/actions/labeler) from 4 to 5.
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](https://github.com/actions/labeler/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/labeler
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-05 00:04:35 +01:00
Gunjan Gupta
4702c9f772 Fix pr-size-labeler again as its still not working 2023-11-25 20:19:29 +01:00
Gunjan Gupta
931831622e pr-size-labeler: add permissions to fix failure 2023-11-22 22:27:24 +01:00
Igor Pecovnik
ff198109e0 We don't need to restart kernel recompilation upon PR text changes 2023-11-21 20:22:39 +01:00
dependabot[bot]
5e1643220b build(deps): bump pascalgn/size-label-action from 0.4.3 to 0.5.0
Bumps [pascalgn/size-label-action](https://github.com/pascalgn/size-label-action) from 0.4.3 to 0.5.0.
- [Release notes](https://github.com/pascalgn/size-label-action/releases)
- [Commits](https://github.com/pascalgn/size-label-action/compare/v0.4.3...v0.5.0)

---
updated-dependencies:
- dependency-name: pascalgn/size-label-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-11-21 14:33:43 +05:30
Igor
70832ae5a1
Improve labeling system - refactor labeling logic (#5916)
* Add label table
* Add PR size labelling
* Implement suggestings from meeting
* Add proper GitHub labeller
---------

Co-authored-by: Werner <EvilOlaf@users.noreply.github.com>
2023-11-19 22:36:06 +01:00
Igor
e4e74c245f
For getting a PR SHA, action needs to be executed from PR (#5910)
* For getting a PR SHA, action needs to be executed from PR
* Change PR compilation to label & team check
2023-11-14 16:15:47 +01:00
dependabot[bot]
967c3040cc build(deps): bump tspascoal/get-user-teams-membership from 2 to 3
Bumps [tspascoal/get-user-teams-membership](https://github.com/tspascoal/get-user-teams-membership) from 2 to 3.
- [Release notes](https://github.com/tspascoal/get-user-teams-membership/releases)
- [Commits](https://github.com/tspascoal/get-user-teams-membership/compare/v2...v3)

---
updated-dependencies:
- dependency-name: tspascoal/get-user-teams-membership
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-11-14 12:04:43 +01:00
Igor
47f8065d49
Enable artifacts creation at pull request (#5804)
* Add action for artifacts creation at pull request
* Run at PR comment /build and improve security
2023-11-08 16:54:04 +01:00
dependabot[bot]
2cc436b004
build(deps): bump ossf/scorecard-action from 2.3.0 to 2.3.1 (#5874)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.3.0 to 2.3.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/v2.3.0...v2.3.1)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-31 08:02:38 +01:00
dependabot[bot]
3e3b0a0cde
build(deps): bump tj-actions/changed-files from 39 to 40 (#5873)
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 39 to 40.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](https://github.com/tj-actions/changed-files/compare/v39...v40)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-31 08:02:24 +01:00
dependabot[bot]
b7bc0015b0 build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/v2.2.0...v2.3.0)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-10 20:26:17 +02:00
dependabot[bot]
e13a128f78 build(deps): bump tj-actions/changed-files from 38 to 39
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 38 to 39.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](https://github.com/tj-actions/changed-files/compare/v38...v39)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-12 10:02:46 +02:00
dependabot[bot]
6ecca26ced build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.2 to 3.1.3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](0b7f8abb15...a8a3f3ad30)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-12 10:02:36 +02:00
dependabot[bot]
8edfe5520b build(deps): bump actions/checkout from 3 to 4
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-06 13:09:07 +02:00
dependabot[bot]
51e38183a8 build(deps): bump tj-actions/changed-files from 37 to 38
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 37 to 38.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](https://github.com/tj-actions/changed-files/compare/v37...v38)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-29 08:28:54 +02:00
dependabot[bot]
0359e2241b Bump ossf/scorecard-action from 2.1.3 to 2.2.0
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.1.3 to 2.2.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/v2.1.3...v2.2.0)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-26 21:19:49 +02:00
dependabot[bot]
205319e56e Bump tj-actions/changed-files from 36 to 37
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 36 to 37.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](https://github.com/tj-actions/changed-files/compare/v36...v37)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-26 21:18:49 +02:00
dependabot[bot]
17543acde4 build(deps): bump tj-actions/changed-files from 35 to 36
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 35 to 36.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](https://github.com/tj-actions/changed-files/compare/v35...v36)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-01 06:32:47 +02:00
Igor
97be075d56 Limit execution to main branch only 2023-05-04 16:44:44 +02:00
Igor Pečovnik
c837ed2c2e Limit execution to branch main 2023-04-21 14:23:13 +02:00
Igor
8a5f07cfba Add Action to execute remote workflow on config changes 2023-04-21 14:23:13 +02:00
Igor Pečovnik
bf77c5e8a3 Fix after copy paste 2023-04-18 09:27:09 +02:00