Skip to content

feat: trim ci (renovate, openssf)#431

Merged
brorlarsnicklas merged 3 commits intomainfrom
feat/trim-ci
Oct 21, 2025
Merged

feat: trim ci (renovate, openssf)#431
brorlarsnicklas merged 3 commits intomainfrom
feat/trim-ci

Conversation

@janderssonse
Copy link
Contributor

@janderssonse janderssonse commented Oct 19, 2025

Justerar open ssf till att köra endast 2 gngr i veckan, men också att man kan välja att köra från gui närsomhelst.

Använder organisationsgemensam konfig för renovate som är gemensam för hela org. Det som är specifikt för projektet som tex automerge patch istället för minor ligger kvar. Ingen funktionsförlust, men gör det lättare att adminstrera projekten på diggsweden. PS Projekteten kan åsidosätta, lägga till eller ta bort inställningar precis som man önskar vid behov DS

(Alla projekt på diggssweden kör nu på likvärdigt sätt för renovate, open ssf, eller har PR på gång)

Checklist

  • Changes are limited to a single goal (avoid scope creep)
  • I confirm that I have read any Contribution and Development guidelines (CONTRIBUTING and DEVELOPMENT) and are following their suggestions.
  • I confirm that I wrote and/or have the right to submit the contents of my Pull Request, by agreeing to the Developer Certificate of Origin, (adding a 'sign-off' to my commits).

This PR trims the open ssf scorecard settings so
that it

A) runs twice a week only
B) is runnable from GUI anytime

A) As it is more of general health tool,
there is no need to run it every commit to main.

B) Leaves the option of being able to run it anytime

Signed-off-by: Josef Andersson <josef.andersson@digg.se>
This PR trims and aligns the renovate config
to use the base organisation config.
It eases the maintenance of administration,
but still, it also makes sense when juggling many repositories.

100% compatible, i.e no functionality loss to current conf.

Signed-off-by: Josef Andersson <josef.andersson@digg.se>
Signed-off-by: Josef Andersson <josef.andersson@digg.se>
@brorlarsnicklas brorlarsnicklas merged commit 7991039 into main Oct 21, 2025
12 checks passed
DiggSwedenBot added a commit that referenced this pull request Nov 6, 2025
## 1.1.0 - 2025-11-04
### Build
- Remove src code from container image (#430)

### Chore
- Update node.js to <=22.15.1 (#310)
- Update dependency @types/node to ^22.15.17 (#311)
- Update dependency ts-jest to ^29.3.2 (#312)
- Update dependency @types/express to ^5.0.1 (#314)
- Update node.js to v22.15.1 (#316)
- Update dependency @types/node to ^22.15.18 (#318)
- Lock file maintenance (#320)
- Update dependency @types/node to ^22.15.21 (#323)
- Lock file maintenance (#324)
- Update dependency @types/node to ^22.15.29 (#327)
- Lock file maintenance (#328)
- Update dependency @types/node to ^22.15.30 (#330)
- Update dependency express-openapi-validator to v5.5.7 (#335)
- Lock file maintenance (#336)
- Update dependency jest to v30 (#331)
- Update dependency @types/node to ^22.15.31 (#348)
- Lock file maintenance (#359)
- Update dependency @types/node to ^22.15.32 (#362)
- Update dependency jest to ^30.0.2 (#363)
- Lock file maintenance (#364)
- Update dependency @types/node to ^22.15.34 (#365)
- Update dependency jest to ^30.0.3 (#366)
- Lock file maintenance (#367)
- Update dependency @types/node to ^22.16.0 (#368)
- Lock file maintenance (#369)
- Update dependency @types/node to ^22.16.3 (#371)
- Lock file maintenance (#372)
- Update dependency jest to ^30.0.4 (#373)
- Lock file maintenance (#374)
- Lock file maintenance (#375)
- Lock file maintenance (#376)
- Lock file maintenance (#377)
- Lock file maintenance (#382)
- Update docker/setup-buildx-action action to v3.11.1 (#386)
- Update github actions (#340)
- Lock file maintenance (#389)
- Update dependency chalk to v5.6.2 (#397)
- Lock file maintenance (#398)
- Update dev dependencies (#401)
- Lock file maintenance (#404)
- Lock file maintenance (#406)
- Update dependency @types/node to ^22.18.6 (#410)
- Update renovate scheduling
- Update dependency typescript to ^5.9.2 (#413)
- Lock file maintenance (#414)
- Update package.json (#416)
- Update dependency @types/node to ^22.18.8 (#419)
- Lock file maintenance (#420)
- Update automerge for patches to only run on sat (#423)
- Update github actions to v5 (#313)
- Migrate config renovate.json (#418)
- Update core dependencies (major) (#309)
- Update dependency @types/jest to v30 (#339)
- Update actions/setup-node action to v6 (#425)
- Update node.js (#319)
- Lock file maintenance (#432)
- Update node.js to <=22.21.0 (#434)
- Lock file maintenance (#435)
- Update dependency node to v22.21.0 (#443)
- Lock file maintenance (#446)
- Update licence headers as recommended (#441)

### Ci
- CI-adjustments (#381)
- Add a new workflow for pre-release tags (#396)
- Use reusable ci v1 (#415)
- Use reuseable-ci v2, dev npm support (#424)

### Docs
- Update details for contributing. (#334)
- Fix broken link for contributing guidelines (#338)
- Change primary language from english to swedish (#411)
- Improve documentation for readme and development (#417)
- Update readme and development about access rights to containers (#440)

### Feat
- Add new rule sak16
- Add rule DOK.06
- Add rule DOK.08
- Add rule DOK.09
- Add rule SAK.01
- Add rule RES.02
- Add rule DOK.11
- Add functionality to build and run npm package version of raplp (#409)
- Add rule RES.06
- Add rule MOG.01
- Trim ci (renovate, openssf) (#431)
- Add rule MOG.02
- Extend rule dok.19 to also check summary in path operations

### Fix
- Update projectType input (#427)

[skip ci]

Signed-off-by: DiggSwedenBot <ospo@digg.se>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants