Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create devcontainer.json #2415

Open
wants to merge 1,206 commits into
base: updae_azure_python_cache
Choose a base branch
from
Open

Conversation

Bgcvbb
Copy link

@Bgcvbb Bgcvbb commented May 30, 2024

Pre-requisites

  • Prior to submitting a new workflow, please apply to join the GitHub Technology Partner Program: partner.github.com/apply.

Please note that at this time we are only accepting new starter workflows for Code Scanning. Updates to existing starter workflows are fine.


Tasks

For all workflows, the workflow:

  • Should be contained in a .yml file with the language or platform as its filename, in lower, kebab-cased format (for example, docker-image.yml). Special characters should be removed or replaced with words as appropriate (for example, "dotnet" instead of ".NET").
  • Should use sentence case for the names of workflows and steps (for example, "Run tests").
  • Should be named only by the name of the language or platform (for example, "Go", not "Go CI" or "Go Build").
  • Should include comments in the workflow for any parts that are not obvious or could use clarification.
  • Should specify least privileged permissions for GITHUB_TOKEN so that the workflow runs successfully.

For CI workflows, the workflow:

  • Should be preserved under the ci directory.
  • Should include a matching ci/properties/*.properties.json file (for example, ci/properties/docker-publish.properties.json).
  • Should run on push to branches: [ $default-branch ] and pull_request to branches: [ $default-branch ].
  • Packaging workflows should run on release with types: [ created ].
  • Publishing workflows should have a filename that is the name of the language or platform, in lower case, followed by "-publish" (for example, docker-publish.yml).

For Code Scanning workflows, the workflow:

  • Should be preserved under the code-scanning directory.
  • Should include a matching code-scanning/properties/*.properties.json file (for example, code-scanning/properties/codeql.properties.json), with properties set as follows:
    • name: Name of the Code Scanning integration.
    • creator: Name of the organization/user producing the Code Scanning integration.
    • description: Short description of the Code Scanning integration.
    • categories: Array of languages supported by the Code Scanning integration.
    • iconName: Name of the SVG logo representing the Code Scanning integration. This SVG logo must be present in the icons directory.
  • Should run on push to branches: [ $default-branch, $protected-branches ] and pull_request to branches: [ $default-branch ]. We also recommend a schedule trigger of cron: $cron-weekly (for example, codeql.yml).

Some general notes:

  • This workflow must only use actions that are produced by GitHub, in the actions organization, or
  • This workflow must only use actions that are produced by the language or ecosystem that the workflow supports. These actions must be published to the GitHub Marketplace. We require that these actions be referenced using the full 40 character hash of the action's commit instead of a tag. Additionally, workflows must include the following comment at the top of the workflow file:
    # This workflow uses actions that are not certified by GitHub.
    # They are provided by a third-party and are governed by
    # separate terms of service, privacy policy, and support
    # documentation.
    
  • Automation and CI workflows should not send data to any 3rd party service except for the purposes of installing dependencies.
  • Automation and CI workflows cannot be dependent on a paid service or product.

simon-engledew and others added 30 commits December 13, 2022 10:30
Fix code-scanning filtering for relative paths
Add explanation on which value to use to scan Kotlin and TypeScript
Add Kotlin to CodeQL supported languages.
Starter Workflows for Azure Function App
Bumps [actions/stale](https://github.com/actions/stale) from 6 to 7.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@v6...v7)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
…s/actions/stale-7

Bump actions/stale from 6 to 7
Since GitHub's deprecation of `set-ouput`, the SLSA reusable workflows
needed to change. This PR updates them to the latest version.

Fixes slsa-framework/slsa-github-generator#1302

Signed-off-by: Mihai Maruseac <[email protected]>

Signed-off-by: Mihai Maruseac <[email protected]>
Co-authored-by: Sampark Sharma <[email protected]>
* Update Scorecard naming occurences

Signed-off-by: Gabriela Gutierrez <[email protected]>

* Update Scorecard icon naming

Signed-off-by: Gabriela Gutierrez <[email protected]>

* Update Scorecard workflow naming

Signed-off-by: Gabriela Gutierrez <[email protected]>

Signed-off-by: Gabriela Gutierrez <[email protected]>
Co-authored-by: Sampark Sharma <[email protected]>
* Added Bandit starter workflow and properties file. Python security scanner, Action by a Hubber, wraps free tool

* Set icon name to one in the icons folder

* Switched to Bandit's own SVG icon

* Added workflow disclaimer

* Fixed author name

Co-authored-by: Sampark Sharma <[email protected]>
ctcampbell and others added 26 commits January 29, 2024 10:09
adding dependency graph team as an additional codeowner for the /code-scanning/ directory
Update all Pages workflows to `actions/cache@v4` for `node20` compliance
removing extra whitespace
Update dependency-review.yml actions/checkout version, add common with: options, and add comments for dependency submission
- Bump version hashes to use `v3.0.0` of Gradle action
- Bump to Node20-compatible versions of `actions/checkout` and `actions/setup-java`
- Replace uses of `gradle/gradle-build-action` with `gradle/actions/setup-gradle`
- Split "Setup Gradle" step out of "Run Gradle" steps
- Add separate Job using `gradle/actions/dependency-submission` (flagged as optional)
- Bump to setup JDK 17
- Remove "optional" flag from dependency-submission
- Add example of running without Gradle wrapper
- Link to action docs
* Update soos-dast-scan.yml

* use major version syntax

* code review

* lint

* Update soos-dast-scan.yml
also gave the workflow the appropriate permissions required, pull-requests: write
begone, whitespace

Co-authored-by: Chad Bentz <[email protected]>
Changing default behavior to include comment summary in PR
Code Scanning shouldn't own `dependency-review.yml`
- Bump version hashes to use `gradle/actions/[email protected]`
- Bump version hash to use `gradle/actions/[email protected]`
* Update dotnet.yml

Updating versions

* Update dotnet-desktop.yml

Bumping versions

* Update ci/dotnet-desktop.yml

Co-authored-by: Alexis Abril <[email protected]>

---------

Co-authored-by: Alexis Abril <[email protected]>
@Bgcvbb Bgcvbb requested review from a team as code owners May 30, 2024 21:57
@Bgcvbb Bgcvbb changed the base branch from main to updae_azure_python_cache May 31, 2024 21:06
@Bgcvbb Bgcvbb requested a review from a team as a code owner May 31, 2024 21:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet