Skip to content

feat(ci): Update docs for dep-review #31

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 10 commits into from
Jul 5, 2024
Merged

feat(ci): Update docs for dep-review #31

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
556b4bc
feat(ci): Update docs for dep-review
GeekMasher Jul 5, 2024
173cf0f
Merge branch 'main' into GeekMasher-patch-1
adrienpessu Jul 5, 2024
4bf2ace
add permissions
adrienpessu Jul 5, 2024
a0da84e
test if we can assign to a team
adrienpessu Jul 5, 2024
0991042
add people explicitely
adrienpessu Jul 5, 2024
b338717
test
adrienpessu Jul 5, 2024
a4b6540
test again
adrienpessu Jul 5, 2024
37b6e0e
add PAT
adrienpessu Jul 5, 2024
ce1b39e
clean
adrienpessu Jul 5, 2024
d1f88a4
cleaner
adrienpessu Jul 5, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 7 additions & 1 deletion .github/workflows/dependency-review.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
# 'Dependency Review' Reusable Workflow
#
# Note: Override the default configuration by providing a './.github/dependency-review.yml' in your repo.
# Note: If the default configuration isn't present in your repository, we use the centralised
# configurations.

name: 'Dependency Review'

Expand All @@ -10,6 +11,7 @@ on:

permissions:
contents: read
# Required for writing a PR Comment
pull-requests: write

jobs:
Expand All @@ -19,6 +21,8 @@ jobs:
- name: 'Checkout Repository'
uses: actions/checkout@v4

# [optional] This setup isn't required but if your repository have a configuration,
# we use that versus the centralised config.
- name: 'Check for configuration file'
id: config
env:
Expand All @@ -41,5 +45,7 @@ jobs:
- name: 'Dependency Review'
uses: actions/dependency-review-action@v4
with:
# this value can also be hardcoded to a remote repository
# Example: advanced-security/reusable-workflows/.github/dependency-review.yml@main
config-file: ${{ steps.config.outputs.config }}
comment-summary-in-pr: "always"
5 changes: 2 additions & 3 deletions .github/workflows/language-detection-and-assignment.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,7 @@ on:
branches: [main]

env:
GH_TOKEN: ${{ github.token }}

GH_TOKEN: ${{ secrets.GH_AP_TOKEN }}
jobs:
detect-and-assign:
runs-on: ubuntu-latest
Expand Down Expand Up @@ -46,4 +45,4 @@ jobs:
- name: Assign default
if: steps.detect-languages.outputs.java != 'true' && steps.detect-languages.outputs.kotlin != 'true' && steps.detect-languages.outputs.javascript != 'true' && steps.detect-languages.outputs.typescript != 'true' && steps.detect-languages.outputs.go != 'true' && steps.detect-languages.outputs.codeql != 'true' && steps.detect-languages.outputs.python != 'true'
run: |
gh pr edit ${{ github.event.number }} --add-reviewer oss-maintainers
gh pr edit ${{ github.event.number }} --add-reviewer felickz --add-reviewer Geekmasher --add-reviewer adrienpessu