bo0tzz
504930947d
fix: various actions workflow security improvements ( #17651 )
...
* fix: set persist-credentials explicitly for checkout
https://woodruffw.github.io/zizmor/audits/#artipacked
* fix: minimize permissions scope for workflows
https://woodruffw.github.io/zizmor/audits/#excessive-permissions
* fix: remove potential template injections
https://woodruffw.github.io/zizmor/audits/#template-injection
* fix: only pass needed secrets in workflow_call
https://woodruffw.github.io/zizmor/audits/#secrets-inherit
* fix: push perm for single-arch build jobs
I hadn't realised these push to the registry too :x
* chore: fix formatting
* fix: $
* fix: retag job quoting
---------
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
2025-04-18 15:10:27 -05:00
renovate[bot]
9105e696bf
chore(deps): pin github action dependencies ( #16923 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-17 17:25:14 +00:00
Jason Rasmussen
48c9e66ae5
chore: update job names ( #5375 )
2023-11-28 22:07:47 -05:00
dependabot[bot]
b1467bd1da
chore(deps): bump actions/checkout from 3 to 4 ( #3983 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-06 08:50:22 +07:00
Zack Pollard
5ad4e5b614
infra(server)!: fix typeorm asset entity relations ( #1782 )
...
* fix: add correct relations to asset typeorm entity
* fix: add missing createdAt column to asset entity
* ci: run check to make sure generated API is up-to-date
* ci: cancel workflows that aren't for the latest commit in a branch
* chore: add fvm config for flutter
2023-02-19 16:44:53 +00:00
bo0tzz
0c469cc712
feat(ci): Clean up the actions cache on PR close ( #1350 )
...
* feat(ci): Clean up the actions cache on PR close
The cache entries that are generated on a workflow run for a PR cannot be used by any other contexts [1]. As such, they are useless and just wasting valuable cache space. This commit adds a workflow (copied from [2]) that deletes the cache entries when a PR is closed.
[1] https://docs.github.com/en/actions/using-workflows/caching-dependencies-to-speed-up-workflows#restrictions-for-accessing-a-cache
[2] https://docs.github.com/en/actions/using-workflows/caching-dependencies-to-speed-up-workflows#force-deleting-cache-entries
* feat(ci): List as many cache entries as possible
2023-01-18 08:28:28 -06:00
