File tree Expand file tree Collapse file tree 4 files changed +50
-61
lines changed
Expand file tree Collapse file tree 4 files changed +50
-61
lines changed Original file line number Diff line number Diff line change 1515 CLAAssistant :
1616 runs-on : ubuntu-latest
1717 steps :
18- - uses : actions/create-github-app-token@af35edadc00be37caa72ed9f3e6d5f7801bfdf09 # v1.11.7
19- id : gh-app-token
20- with :
21- app-id : ${{ vars.GH_APP_ID }}
22- private-key : ${{ secrets.GH_APP_PRIVATE_KEY }}
23-
2418 - name : Harden the runner (Audit all outbound calls)
2519 uses : step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
2620 with :
@@ -50,10 +44,10 @@ jobs:
5044 with :
5145 path-to-signatures : ' signatures/${{ github.event.repository.name }}/v1_cla.json'
5246 path-to-document : ' https://github.com/OpenZeppelin/cla-assistant/blob/main/openzeppelin_2025_cla.md'
53- branch : ' main'
47+ branch : main
5448 allowlist : ${{ steps.read_allowlist.outputs.allowlist }}
55- remote-organization-name : ' OpenZeppelin'
56- remote-repository-name : ' cla-sigs'
49+ remote-organization-name : OpenZeppelin
50+ remote-repository-name : cla-sigs
5751 custom-notsigned-prcomment : >
5852 Thank you for your contribution to OpenZeppelin Relayer SDK.
5953 Before being able to integrate those changes, we would like you to
Original file line number Diff line number Diff line change 1- # TODO: To be uncommeted when the repo goes public
2- # name: "CodeQL"
1+ name : " CodeQL"
32
4- # on:
5- # push:
6- # branches: ["main"]
7- # pull_request:
8- # branches: ["main"]
9- # schedule:
10- # - cron: '40 12 * * 3'
3+ on :
4+ push :
5+ branches : ["main"]
6+ pull_request :
7+ branches : ["main"]
8+ schedule :
9+ - cron : ' 40 12 * * 3'
1110
12- # jobs:
13- # analyze:
14- # name: Code Analysis
15- # runs-on: ubuntu-latest
16- # permissions:
17- # actions: read
18- # contents: read
19- # security-events: write
11+ jobs :
12+ analyze :
13+ name : Code Analysis
14+ runs-on : ubuntu-latest
15+ permissions :
16+ actions : read
17+ contents : read
18+ security-events : write
2019
21- # strategy:
22- # fail-fast: false
23- # matrix:
24- # language: ["javascript"]
20+ strategy :
21+ fail-fast : false
22+ matrix :
23+ language : ["javascript"]
2524
26- # steps:
27- # - name: Checkout repository
28- # uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.5.4
25+ steps :
26+ - name : Checkout repository
27+ uses : actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.5.4
2928
30- # - name: Initialize CodeQL
31- # uses: github/codeql-action/init@8214744c546c1e5c8f03dde8fab3a7353211988d # v3.26.7
32- # with:
33- # languages: ${{ matrix.language }}
29+ - name : Initialize CodeQL
30+ uses : github/codeql-action/init@8214744c546c1e5c8f03dde8fab3a7353211988d # v3.26.7
31+ with :
32+ languages : ${{ matrix.language }}
3433
35- # - name: Perform CodeQL Analysis
36- # uses: github/codeql-action/analyze@8214744c546c1e5c8f03dde8fab3a7353211988d # v3.26.7
37- # with:
38- # category: "/language:${{matrix.language}}"
34+ - name : Perform CodeQL Analysis
35+ uses : github/codeql-action/analyze@8214744c546c1e5c8f03dde8fab3a7353211988d # v3.26.7
36+ with :
37+ category : " /language:${{matrix.language}}"
Original file line number Diff line number Diff line change 77#
88# Source repository: https://github.com/actions/dependency-review-action
99
10- # # TODO: Uncomment when the repo goes public
11- # name: 'Dependency Review'
12- # on: [pull_request]
10+ name : ' Dependency Review'
11+ on : [pull_request]
1312
14- # permissions:
15- # contents: read
13+ permissions :
14+ contents : read
1615
17- # jobs:
18- # dependency-review:
19- # runs-on: ubuntu-latest
20- # steps:
21- # - name: Harden Runner
22- # uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
23- # with:
24- # egress-policy: audit
16+ jobs :
17+ dependency-review :
18+ runs-on : ubuntu-latest
19+ steps :
20+ - name : Harden Runner
21+ uses : step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
22+ with :
23+ egress-policy : audit
2524
26- # - name: 'Checkout Repository'
27- # uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
28- # - name: 'Dependency Review'
29- # uses: actions/dependency-review-action@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c # v4.3.4
25+ - name : ' Checkout Repository'
26+ uses : actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
27+ - name : ' Dependency Review'
28+ uses : actions/dependency-review-action@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c # v4.3.4
Original file line number Diff line number Diff line change 44
55name : Scorecard supply-chain security
66on :
7- # For Branch-Protection check. Only the default branch is supported. See
8- # https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
9- branch_protection_rule :
107 # To guarantee Maintained check is occasionally updated. See
118 # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
129 schedule :
You can’t perform that action at this time.
0 commit comments