File tree Expand file tree Collapse file tree 3 files changed +88
-0
lines changed Expand file tree Collapse file tree 3 files changed +88
-0
lines changed Original file line number Diff line number Diff line change 1+ # Dependency Review Action
2+ #
3+ # This Action will scan dependency manifest files that change as part of a Pull Request,
4+ # surfacing known-vulnerable versions of the packages declared or updated in the PR.
5+ # Once installed, if the workflow run is marked as required, PRs introducing known-vulnerable
6+ # packages will be blocked from merging.
7+ #
8+ # Source repository: https://github.com/actions/dependency-review-action
9+ # Public documentation: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
10+ name : ' Dependency review'
11+ on :
12+ pull_request :
13+ branches : [ "master" ]
14+
15+ # If using a dependency submission action in this workflow this permission will need to be set to:
16+ #
17+ # permissions:
18+ # contents: write
19+ #
20+ # https://docs.github.com/en/enterprise-cloud@latest/code-security/supply-chain-security/understanding-your-software-supply-chain/using-the-dependency-submission-api
21+ permissions :
22+ contents : read
23+ # Write permissions for pull-requests are required for using the `comment-summary-in-pr` option, comment out if you aren't using this option
24+ pull-requests : write
25+
26+ jobs :
27+ dependency-review :
28+ runs-on : ubuntu-latest
29+ steps :
30+ - name : ' Checkout repository'
31+ uses : actions/checkout@v4
32+ - name : ' Dependency Review'
33+ uses : actions/dependency-review-action@v4
34+ # Commonly enabled options, see https://github.com/actions/dependency-review-action#configuration-options for all available options.
35+ with :
36+ comment-summary-in-pr : always
37+ # fail-on-severity: moderate
38+ # deny-licenses: GPL-1.0-or-later, LGPL-2.0-or-later
39+ # retry-on-snapshot-warnings: true
Original file line number Diff line number Diff line change 1+ # This workflow will triage pull requests and apply a label based on the
2+ # paths that are modified in the pull request.
3+ #
4+ # To use this workflow, you will need to set up a .github/labeler.yml
5+ # file with configuration. For more information, see:
6+ # https://github.com/actions/labeler
7+
8+ name : Labeler
9+ on : [pull_request_target]
10+
11+ jobs :
12+ label :
13+
14+ runs-on : ubuntu-latest
15+ permissions :
16+ contents : read
17+ pull-requests : write
18+
19+ steps :
20+ - uses : actions/labeler@v4
21+ with :
22+ repo-token : " ${{ secrets.GITHUB_TOKEN }}"
Original file line number Diff line number Diff line change 1+ # This workflow warns and then closes issues and PRs that have had no activity for a specified amount of time.
2+ #
3+ # You can adjust the behavior by modifying this file.
4+ # For more information, see:
5+ # https://github.com/actions/stale
6+ name : Mark stale issues and pull requests
7+
8+ on :
9+ schedule :
10+ - cron : ' 42 18 * * *'
11+
12+ jobs :
13+ stale :
14+
15+ runs-on : ubuntu-latest
16+ permissions :
17+ issues : write
18+ pull-requests : write
19+
20+ steps :
21+ - uses : actions/stale@v5
22+ with :
23+ repo-token : ${{ secrets.GITHUB_TOKEN }}
24+ stale-issue-message : ' Stale issue message'
25+ stale-pr-message : ' Stale pull request message'
26+ stale-issue-label : ' no-issue-activity'
27+ stale-pr-label : ' no-pr-activity'
You can’t perform that action at this time.
0 commit comments