Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Set up ODGen SAST scan in CI #1770

Merged
merged 18 commits into from
Nov 25, 2024
Merged

Set up ODGen SAST scan in CI #1770

Changes from 1 commit
Commits
Show all changes
18 commits
Select commit Hold shift + click to select a range
74a1fcb
Set up ODGen SAST scan in CI
ericcornelissen Nov 13, 2024
e5f8042
test ericcornelissen/odgen-action build
ericcornelissen Nov 13, 2024
be224ae
test ericcornelissen/odgen-action build
ericcornelissen Nov 13, 2024
045a9e2
test ericcornelissen/odgen-action build
ericcornelissen Nov 13, 2024
7c64bdc
use v1.0.1
ericcornelissen Nov 13, 2024
cc0b02c
Configure harden-runner for ODGen job
ericcornelissen Nov 13, 2024
68d1580
test next odgen release candidate
ericcornelissen Nov 17, 2024
82e4135
Merge branch 'main' into try-odgen
ericcornelissen Nov 17, 2024
2ac2ef9
test next odgen release candidate
ericcornelissen Nov 17, 2024
bbedbb0
test next odgen release candidate
ericcornelissen Nov 17, 2024
6f6b161
bump odgen-action to 1.0.2
ericcornelissen Nov 17, 2024
b740a39
test scanning for all vuln types
ericcornelissen Nov 17, 2024
58fc380
test scanning for all vuln types
ericcornelissen Nov 17, 2024
bbd7c22
revert back to 1.0.2
ericcornelissen Nov 17, 2024
71dc3a9
test scanning for all vuln types
ericcornelissen Nov 25, 2024
09d69cb
test scanning for all vuln types
ericcornelissen Nov 25, 2024
731d086
bump odgen-action to v1.0.3
ericcornelissen Nov 25, 2024
a19c4e5
Merge branch 'main' into try-odgen
ericcornelissen Nov 25, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions .github/workflows/checks.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -261,6 +261,21 @@ jobs:
run: npm clean-install
- name: Check
run: npm run check:md
odgen:
name: ODGen
runs-on: ubuntu-24.04
steps:
- name: Harden runner
uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
with:
egress-policy: audit
ericcornelissen marked this conversation as resolved.
Show resolved Hide resolved
- name: Checkout repository
uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
with:
persist-credentials: false
- uses: ericcornelissen/odgen-action@58393b6d7766784846464fd622e27c0e60bf9f47 # v1.0.0
with:
vulnerability_type: proto_pollution
reproducible:
name: Reproducible build
runs-on: ubuntu-24.04
Expand Down
Loading