-
Notifications
You must be signed in to change notification settings - Fork 14
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Configure application security policy in CI #381
Conversation
3adeaed
to
8a903de
Compare
8a903de
to
656b2a6
Compare
I've addressed all the go lint complaints now. Will leave the action stuff for someone else to address. |
If it is easier, this can be merged without the actions changes for now. None of the checks are required - just advisory. Then at a later stage once the issues are fixed the checks can be enforced. |
I think just the idea of it having a constant red failure that is an advisory will still irk me. I'm happy to wait a bit to see if someone else can address the actions stuff before it annoys me too much. |
I've disabled shellcheck on actions - it's very needy! We can always work on it in the background. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Happy to get this in place - and tweak as may be necessary!
Partially addresses #360.
Once this is merged, we can enable Dependabot at which point #360 can be closed.