7 Commits

Include renames

Author	SHA1	Message	Date
travisn	0f51a42711	ci: enable snyk flag not to build vcs ... The snyk check is failing because the -buildvcs flag is defaulting to true. Let's disable this flag to get the check passing. Signed-off-by: travisn <tnielsen@redhat.com> (cherry picked from commit 9197966ed4)	2023-02-27 23:16:43 +00:00
dependabot[bot]	53bbd631e1	build(deps): bump actions/checkout from 2 to 3 ... Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2022-10-27 13:55:01 +00:00
neilnaveen	2e2eca672a	ci: set permissions for github actions ... Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs Signed-off-by: neilnaveen <42328488+neilnaveen@users.noreply.github.com>	2022-08-04 11:07:00 -06:00
subhamkrai	ae2a56deb0	ci: skip snyk ci from running on fork repo ... Signed-off-by: subhamkrai <srai@redhat.com>	2022-07-01 12:23:23 +05:30
Sébastien Han	d8e9885fd6	ci: only run snyk on merges and not on PRs ... We cannot use the secret when PRs are pushed from forks so let's run the security scan only after PRs are merged. Signed-off-by: Sébastien Han <seb@redhat.com>	2021-10-26 10:55:43 +02:00
subhamkrai	0ebbb78373	ci: update snyk token ... Update snyk token, it was pointing to wrong token. Signed-off-by: subhamkrai <srai@redhat.com>	2021-10-26 08:51:51 +05:30
subhamkrai	faefd097b0	ci: add action for synk as rook licence ... Adding github action for synk as licence for rook. This will replace FOSSA licence in future. Links to read about synk 1. https://snyk.io/ 2. https://github.com/snyk/snyk Signed-off-by: subhamkrai <srai@redhat.com>	2021-10-25 13:33:09 +05:30