feat: trim ci (renovate, openssf)#431
Merged
brorlarsnicklas merged 3 commits intomainfrom Oct 21, 2025
Merged
Conversation
brorlarsnicklas
approved these changes
Oct 20, 2025
This PR trims the open ssf scorecard settings so that it A) runs twice a week only B) is runnable from GUI anytime A) As it is more of general health tool, there is no need to run it every commit to main. B) Leaves the option of being able to run it anytime Signed-off-by: Josef Andersson <josef.andersson@digg.se>
This PR trims and aligns the renovate config to use the base organisation config. It eases the maintenance of administration, but still, it also makes sense when juggling many repositories. 100% compatible, i.e no functionality loss to current conf. Signed-off-by: Josef Andersson <josef.andersson@digg.se>
9284520 to
7d6d8bc
Compare
Signed-off-by: Josef Andersson <josef.andersson@digg.se>
brorlarsnicklas
approved these changes
Oct 20, 2025
DiggSwedenBot
added a commit
that referenced
this pull request
Nov 6, 2025
## 1.1.0 - 2025-11-04 ### Build - Remove src code from container image (#430) ### Chore - Update node.js to <=22.15.1 (#310) - Update dependency @types/node to ^22.15.17 (#311) - Update dependency ts-jest to ^29.3.2 (#312) - Update dependency @types/express to ^5.0.1 (#314) - Update node.js to v22.15.1 (#316) - Update dependency @types/node to ^22.15.18 (#318) - Lock file maintenance (#320) - Update dependency @types/node to ^22.15.21 (#323) - Lock file maintenance (#324) - Update dependency @types/node to ^22.15.29 (#327) - Lock file maintenance (#328) - Update dependency @types/node to ^22.15.30 (#330) - Update dependency express-openapi-validator to v5.5.7 (#335) - Lock file maintenance (#336) - Update dependency jest to v30 (#331) - Update dependency @types/node to ^22.15.31 (#348) - Lock file maintenance (#359) - Update dependency @types/node to ^22.15.32 (#362) - Update dependency jest to ^30.0.2 (#363) - Lock file maintenance (#364) - Update dependency @types/node to ^22.15.34 (#365) - Update dependency jest to ^30.0.3 (#366) - Lock file maintenance (#367) - Update dependency @types/node to ^22.16.0 (#368) - Lock file maintenance (#369) - Update dependency @types/node to ^22.16.3 (#371) - Lock file maintenance (#372) - Update dependency jest to ^30.0.4 (#373) - Lock file maintenance (#374) - Lock file maintenance (#375) - Lock file maintenance (#376) - Lock file maintenance (#377) - Lock file maintenance (#382) - Update docker/setup-buildx-action action to v3.11.1 (#386) - Update github actions (#340) - Lock file maintenance (#389) - Update dependency chalk to v5.6.2 (#397) - Lock file maintenance (#398) - Update dev dependencies (#401) - Lock file maintenance (#404) - Lock file maintenance (#406) - Update dependency @types/node to ^22.18.6 (#410) - Update renovate scheduling - Update dependency typescript to ^5.9.2 (#413) - Lock file maintenance (#414) - Update package.json (#416) - Update dependency @types/node to ^22.18.8 (#419) - Lock file maintenance (#420) - Update automerge for patches to only run on sat (#423) - Update github actions to v5 (#313) - Migrate config renovate.json (#418) - Update core dependencies (major) (#309) - Update dependency @types/jest to v30 (#339) - Update actions/setup-node action to v6 (#425) - Update node.js (#319) - Lock file maintenance (#432) - Update node.js to <=22.21.0 (#434) - Lock file maintenance (#435) - Update dependency node to v22.21.0 (#443) - Lock file maintenance (#446) - Update licence headers as recommended (#441) ### Ci - CI-adjustments (#381) - Add a new workflow for pre-release tags (#396) - Use reusable ci v1 (#415) - Use reuseable-ci v2, dev npm support (#424) ### Docs - Update details for contributing. (#334) - Fix broken link for contributing guidelines (#338) - Change primary language from english to swedish (#411) - Improve documentation for readme and development (#417) - Update readme and development about access rights to containers (#440) ### Feat - Add new rule sak16 - Add rule DOK.06 - Add rule DOK.08 - Add rule DOK.09 - Add rule SAK.01 - Add rule RES.02 - Add rule DOK.11 - Add functionality to build and run npm package version of raplp (#409) - Add rule RES.06 - Add rule MOG.01 - Trim ci (renovate, openssf) (#431) - Add rule MOG.02 - Extend rule dok.19 to also check summary in path operations ### Fix - Update projectType input (#427) [skip ci] Signed-off-by: DiggSwedenBot <ospo@digg.se>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Justerar open ssf till att köra endast 2 gngr i veckan, men också att man kan välja att köra från gui närsomhelst.
Använder organisationsgemensam konfig för renovate som är gemensam för hela org. Det som är specifikt för projektet som tex automerge patch istället för minor ligger kvar. Ingen funktionsförlust, men gör det lättare att adminstrera projekten på diggsweden. PS Projekteten kan åsidosätta, lägga till eller ta bort inställningar precis som man önskar vid behov DS
(Alla projekt på diggssweden kör nu på likvärdigt sätt för renovate, open ssf, eller har PR på gång)
Checklist