Skip to content

Commit a505b3a

Browse files
juan-fernandezjuan-fernandez
authored
Merge branch 'master' into juan-fernandez/set-is-user-provided-service
2 parents b0a932a + 1b7c421 commit a505b3a

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

46 files changed

+878
-437
lines changed

‎.github/dependabot.yml

+15
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
# To get started with Dependabot version updates, you'll need to specify which
2+
# package ecosystems to update and where the package manifests are located.
3+
# Please see the documentation for all configuration options:
4+
# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
5+
6+
version: 2
7+
updates:
8+
- package-ecosystem: "github-actions"
9+
directory: "/"
10+
schedule:
11+
interval: "monthly"
12+
groups:
13+
gh-actions-packages:
14+
patterns:
15+
- "*"

‎.github/workflows/actionlint.yml

+5-3
Original file line numberDiff line numberDiff line change
@@ -5,13 +5,15 @@ on:
55
push:
66
branches: [master]
77
schedule:
8-
- cron: "0 4 * * *"
8+
- cron: 0 4 * * *
9+
- cron: 20 4 * * *
10+
- cron: 40 4 * * *
911

1012
jobs:
1113
actionlint:
1214
runs-on: ubuntu-latest
1315
steps:
14-
- uses: actions/checkout@v4
16+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1517
- uses: ./.github/actions/node/setup
1618
# NOTE: Ok this next bit seems unnecessary, right? The problem is that
1719
# this repo is currently incompatible with npm, at least with the
@@ -24,7 +26,7 @@ jobs:
2426
npm init -y
2527
- name: actionlint
2628
id: actionlint
27-
uses: raven-actions/actionlint@v2
29+
uses: raven-actions/actionlint@01fce4f43a270a612932cb1c64d40505a029f821 # v2.0.0
2830
with:
2931
matcher: true
3032
fail-on-error: true

‎.github/workflows/all-green.yml

+8-2
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,13 @@ on:
55
branches:
66
- master
77
schedule:
8-
- cron: "0 4 * * *"
8+
- cron: 0 4 * * *
9+
- cron: 20 4 * * *
10+
- cron: 40 4 * * *
11+
12+
concurrency:
13+
group: ${{ github.workflow }}-${{ github.ref || github.run_id }}
14+
cancel-in-progress: true
915

1016
jobs:
1117

@@ -15,7 +21,7 @@ jobs:
1521
checks: read
1622
contents: read
1723
steps:
18-
- uses: wechuli/allcheckspassed@v1
24+
- uses: wechuli/allcheckspassed@2e5e8bbc775f5680ed5d02e3a22e2fc7219792ac # v1.1.0
1925
with:
2026
retries: 20 # once per minute, some checks take up to 15 min
2127
checks_exclude: devflow.*

‎.github/workflows/appsec.yml

+38-36
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,9 @@ on:
55
push:
66
branches: [master]
77
schedule:
8-
- cron: '0 4 * * *'
8+
- cron: 0 4 * * *
9+
- cron: 20 4 * * *
10+
- cron: 40 4 * * *
911

1012
concurrency:
1113
group: ${{ github.workflow }}-${{ github.ref || github.run_id }}
@@ -15,16 +17,16 @@ jobs:
1517
macos:
1618
runs-on: macos-latest
1719
steps:
18-
- uses: actions/checkout@v4
20+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1921
- uses: ./.github/actions/node/setup
2022
- uses: ./.github/actions/install
2123
- run: yarn test:appsec:ci
22-
- uses: codecov/codecov-action@v5
24+
- uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
2325

2426
ubuntu:
2527
runs-on: ubuntu-latest
2628
steps:
27-
- uses: actions/checkout@v4
29+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2830
- uses: ./.github/actions/node/setup
2931
- uses: ./.github/actions/install
3032
- uses: ./.github/actions/node/oldest
@@ -33,18 +35,18 @@ jobs:
3335
- run: yarn test:appsec:ci
3436
- uses: ./.github/actions/node/latest
3537
- run: yarn test:appsec:ci
36-
- uses: codecov/codecov-action@v5
38+
- uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
3739

3840
windows:
3941
runs-on: windows-latest
4042
steps:
41-
- uses: actions/checkout@v4
42-
- uses: actions/setup-node@v4
43+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
44+
- uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
4345
with:
4446
node-version: '18'
4547
- uses: ./.github/actions/install
4648
- run: yarn test:appsec:ci
47-
- uses: codecov/codecov-action@v5
49+
- uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
4850

4951
ldapjs:
5052
runs-on: ubuntu-latest
@@ -62,14 +64,14 @@ jobs:
6264
LDAP_USERS: 'user01,user02'
6365
LDAP_PASSWORDS: 'password1,password2'
6466
steps:
65-
- uses: actions/checkout@v4
67+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
6668
- uses: ./.github/actions/node/setup
6769
- uses: ./.github/actions/install
6870
- uses: ./.github/actions/node/oldest
6971
- run: yarn test:appsec:plugins:ci
7072
- uses: ./.github/actions/node/latest
7173
- run: yarn test:appsec:plugins:ci
72-
- uses: codecov/codecov-action@v5
74+
- uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
7375

7476
postgres:
7577
runs-on: ubuntu-latest
@@ -85,7 +87,7 @@ jobs:
8587
PLUGINS: pg|knex
8688
SERVICES: postgres
8789
steps:
88-
- uses: actions/checkout@v4
90+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
8991
- uses: ./.github/actions/node/setup
9092
- uses: ./.github/actions/install
9193
- uses: ./.github/actions/node/oldest
@@ -94,7 +96,7 @@ jobs:
9496
- run: yarn test:appsec:plugins:ci
9597
- uses: ./.github/actions/node/20
9698
- run: yarn test:appsec:plugins:ci
97-
- uses: codecov/codecov-action@v5
99+
- uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
98100

99101
mysql:
100102
runs-on: ubuntu-latest
@@ -110,42 +112,42 @@ jobs:
110112
PLUGINS: mysql|mysql2|sequelize
111113
SERVICES: mysql
112114
steps:
113-
- uses: actions/checkout@v4
115+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
114116
- uses: ./.github/actions/node/setup
115117
- uses: ./.github/actions/install
116118
- uses: ./.github/actions/node/18
117119
- run: yarn test:appsec:plugins:ci
118120
- uses: ./.github/actions/node/20
119121
- run: yarn test:appsec:plugins:ci
120-
- uses: codecov/codecov-action@v5
122+
- uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
121123

122124
express:
123125
runs-on: ubuntu-latest
124126
env:
125127
PLUGINS: express|body-parser|cookie-parser|multer
126128
steps:
127-
- uses: actions/checkout@v4
129+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
128130
- uses: ./.github/actions/node/setup
129131
- uses: ./.github/actions/install
130132
- uses: ./.github/actions/node/oldest
131133
- run: yarn test:appsec:plugins:ci
132134
- uses: ./.github/actions/node/latest
133135
- run: yarn test:appsec:plugins:ci
134-
- uses: codecov/codecov-action@v5
136+
- uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
135137

136138
graphql:
137139
runs-on: ubuntu-latest
138140
env:
139141
PLUGINS: apollo-server|apollo-server-express|apollo-server-fastify|apollo-server-core
140142
steps:
141-
- uses: actions/checkout@v4
143+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
142144
- uses: ./.github/actions/node/setup
143145
- uses: ./.github/actions/install
144146
- uses: ./.github/actions/node/oldest
145147
- run: yarn test:appsec:plugins:ci
146148
- uses: ./.github/actions/node/latest
147149
- run: yarn test:appsec:plugins:ci
148-
- uses: codecov/codecov-action@v5
150+
- uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
149151

150152
mongodb-core:
151153
runs-on: ubuntu-latest
@@ -158,14 +160,14 @@ jobs:
158160
PLUGINS: express-mongo-sanitize|mquery
159161
SERVICES: mongo
160162
steps:
161-
- uses: actions/checkout@v4
163+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
162164
- uses: ./.github/actions/node/setup
163165
- uses: ./.github/actions/install
164166
- uses: ./.github/actions/node/oldest
165167
- run: yarn test:appsec:plugins:ci
166168
- uses: ./.github/actions/node/latest
167169
- run: yarn test:appsec:plugins:ci
168-
- uses: codecov/codecov-action@v5
170+
- uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
169171

170172
mongoose:
171173
runs-on: ubuntu-latest
@@ -178,21 +180,21 @@ jobs:
178180
PLUGINS: mongoose
179181
SERVICES: mongo
180182
steps:
181-
- uses: actions/checkout@v4
183+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
182184
- uses: ./.github/actions/node/setup
183185
- uses: ./.github/actions/install
184186
- uses: ./.github/actions/node/oldest
185187
- run: yarn test:appsec:plugins:ci
186188
- uses: ./.github/actions/node/latest
187189
- run: yarn test:appsec:plugins:ci
188-
- uses: codecov/codecov-action@v5
190+
- uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
189191

190192
sourcing:
191193
runs-on: ubuntu-latest
192194
env:
193195
PLUGINS: cookie
194196
steps:
195-
- uses: actions/checkout@v4
197+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
196198
- uses: ./.github/actions/node/setup
197199
- uses: ./.github/actions/install
198200
- uses: ./.github/actions/node/18
@@ -201,7 +203,7 @@ jobs:
201203
- run: yarn test:appsec:plugins:ci
202204
- uses: ./.github/actions/node/latest
203205
- run: yarn test:appsec:plugins:ci
204-
- uses: codecov/codecov-action@v5
206+
- uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
205207

206208
next:
207209
strategy:
@@ -233,9 +235,9 @@ jobs:
233235
PLUGINS: next
234236
PACKAGE_VERSION_RANGE: ${{ matrix.range }}
235237
steps:
236-
- uses: actions/checkout@v4
238+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
237239
- uses: ./.github/actions/testagent/start
238-
- uses: actions/setup-node@v4
240+
- uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
239241
with:
240242
cache: yarn
241243
node-version: ${{ matrix.version }}
@@ -245,26 +247,26 @@ jobs:
245247
uses: ./.github/actions/testagent/logs
246248
with:
247249
suffix: appsec-${{ github.job }}-${{ matrix.version }}-${{ matrix.range_clean }}
248-
- uses: codecov/codecov-action@v5
250+
- uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
249251

250252
lodash:
251253
runs-on: ubuntu-latest
252254
env:
253255
PLUGINS: lodash
254256
steps:
255-
- uses: actions/checkout@v4
257+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
256258
- uses: ./.github/actions/node/setup
257259
- uses: ./.github/actions/install
258260
- uses: ./.github/actions/node/oldest
259261
- run: yarn test:appsec:plugins:ci
260262
- uses: ./.github/actions/node/latest
261263
- run: yarn test:appsec:plugins:ci
262-
- uses: codecov/codecov-action@v5
264+
- uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
263265

264266
integration:
265267
runs-on: ubuntu-latest
266268
steps:
267-
- uses: actions/checkout@v4
269+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
268270
- run: yarn install
269271
- uses: ./.github/actions/node/oldest
270272
- run: yarn test:integration:appsec
@@ -276,39 +278,39 @@ jobs:
276278
env:
277279
PLUGINS: passport-local|passport-http
278280
steps:
279-
- uses: actions/checkout@v4
281+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
280282
- uses: ./.github/actions/node/setup
281283
- uses: ./.github/actions/install
282284
- uses: ./.github/actions/node/oldest
283285
- run: yarn test:appsec:plugins:ci
284286
- uses: ./.github/actions/node/latest
285287
- run: yarn test:appsec:plugins:ci
286-
- uses: codecov/codecov-action@v5
288+
- uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
287289

288290
template:
289291
runs-on: ubuntu-latest
290292
env:
291293
PLUGINS: handlebars|pug
292294
steps:
293-
- uses: actions/checkout@v4
295+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
294296
- uses: ./.github/actions/node/setup
295297
- uses: ./.github/actions/install
296298
- uses: ./.github/actions/node/oldest
297299
- run: yarn test:appsec:plugins:ci
298300
- uses: ./.github/actions/node/latest
299301
- run: yarn test:appsec:plugins:ci
300-
- uses: codecov/codecov-action@v5
302+
- uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
301303

302304
node-serialize:
303305
runs-on: ubuntu-latest
304306
env:
305307
PLUGINS: node-serialize
306308
steps:
307-
- uses: actions/checkout@v4
309+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
308310
- uses: ./.github/actions/node/setup
309311
- uses: ./.github/actions/install
310312
- uses: ./.github/actions/node/oldest
311313
- run: yarn test:appsec:plugins:ci
312314
- uses: ./.github/actions/node/latest
313315
- run: yarn test:appsec:plugins:ci
314-
- uses: codecov/codecov-action@v5
316+
- uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1

‎.github/workflows/ci-visibility-performance.yml

+4-2
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,9 @@ on:
66
branches:
77
- master
88
schedule:
9-
- cron: '0 4 * * *'
9+
- cron: 0 4 * * *
10+
- cron: 20 4 * * *
11+
- cron: 40 4 * * *
1012

1113
concurrency:
1214
group: ${{ github.workflow }}-${{ github.ref || github.run_id }}
@@ -19,7 +21,7 @@ jobs:
1921
env:
2022
ROBOT_CI_GITHUB_PERSONAL_ACCESS_TOKEN: ${{ secrets.ROBOT_CI_GITHUB_PERSONAL_ACCESS_TOKEN }}
2123
steps:
22-
- uses: actions/checkout@v4
24+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2325
- uses: ./.github/actions/node/18
2426
- name: CI Visibility Performance Overhead Test
2527
run: yarn bench:e2e:ci-visibility

‎.github/workflows/codeql-analysis.yml

+4-4
Original file line numberDiff line numberDiff line change
@@ -34,11 +34,11 @@ jobs:
3434

3535
steps:
3636
- name: Checkout repository
37-
uses: actions/checkout@v4
37+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3838

3939
# Initializes the CodeQL tools for scanning.
4040
- name: Initialize CodeQL
41-
uses: github/codeql-action/init@v3
41+
uses: github/codeql-action/init@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
4242
with:
4343
languages: ${{ matrix.language }}
4444
config-file: .github/codeql_config.yml
@@ -48,7 +48,7 @@ jobs:
4848
# queries: ./path/to/local/query, your-org/your-repo/queries@main
4949

5050
- name: Autobuild
51-
uses: github/codeql-action/autobuild@v3
51+
uses: github/codeql-action/autobuild@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
5252

5353
- name: Perform CodeQL Analysis
54-
uses: github/codeql-action/analyze@v3
54+
uses: github/codeql-action/analyze@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8

0 commit comments

Comments
 (0)