From 23a64ed96133e90d9246f12cab729a83e15329e6 Mon Sep 17 00:00:00 2001 From: mtpoly <128363128+mt-polygon-technology@users.noreply.github.com> Date: Fri, 1 Mar 2024 17:07:25 +0100 Subject: [PATCH 1/5] Create CODEOWNERS --- .github/CODEOWNERS | 1 + 1 file changed, 1 insertion(+) create mode 100644 .github/CODEOWNERS diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS new file mode 100644 index 00000000..474e8651 --- /dev/null +++ b/.github/CODEOWNERS @@ -0,0 +1 @@ +* @0xPolygon/core-cdk From 4c493fcac0dc9d46396c2b87add14a5e773dea5d Mon Sep 17 00:00:00 2001 From: mtpoly <128363128+mt-polygon-technology@users.noreply.github.com> Date: Fri, 1 Mar 2024 17:08:34 +0100 Subject: [PATCH 2/5] Create security-build.yml --- .github/workflows/security-build.yml | 37 ++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 .github/workflows/security-build.yml diff --git a/.github/workflows/security-build.yml b/.github/workflows/security-build.yml new file mode 100644 index 00000000..f592eac7 --- /dev/null +++ b/.github/workflows/security-build.yml @@ -0,0 +1,37 @@ + +name: Security Build +on: + push: + workflow_dispatch: {} + + +jobs: + golangci: + name: lint + runs-on: ubuntu-latest + steps: + - uses: actions/setup-go@v3 + with: + go-version: 1.17 + - uses: actions/checkout@v3 + - name: golangci-lint + uses: golangci/golangci-lint-action@v3 + with: + version: latest + + govuln: + name: Run govuln check and Publish + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v3 + - name: Running govulncheck + uses: Templum/govulncheck-action@v0.0.8 + continue-on-error: true + env: + DEBUG: "true" + with: + go-version: 1.18 # this mush match your code's golang version + vulncheck-version: latest + package: ./... + github-token: ${{ secrets.GITHUB_TOKEN }} + fail-on-vuln: true From 159cb61f6cd16ccce27c21b589557ce89fec61b1 Mon Sep 17 00:00:00 2001 From: mtpoly <128363128+mt-polygon-technology@users.noreply.github.com> Date: Fri, 1 Mar 2024 17:09:41 +0100 Subject: [PATCH 3/5] Create sonar-cloud.yml --- .github/workflows/sonar-cloud.yml | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 .github/workflows/sonar-cloud.yml diff --git a/.github/workflows/sonar-cloud.yml b/.github/workflows/sonar-cloud.yml new file mode 100644 index 00000000..1eb0f8fc --- /dev/null +++ b/.github/workflows/sonar-cloud.yml @@ -0,0 +1,24 @@ +name: Security Build +on: + push: + branches: + - main + - dev + - staging + workflow_dispatch: {} + pull_request: + types: [opened, synchronize, reopened] + +jobs: + sonarcloud: + name: SonarCloud + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v3 + with: + fetch-depth: 0 + - name: SonarCloud Scan + uses: SonarSource/sonarcloud-github-action@master + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any + SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} From 2dec1d5e090318de38478313c839195f41c9435f Mon Sep 17 00:00:00 2001 From: mtpoly <128363128+mt-polygon-technology@users.noreply.github.com> Date: Wed, 13 Mar 2024 12:27:40 +0100 Subject: [PATCH 4/5] Update security-build.yml --- .github/workflows/security-build.yml | 17 +---------------- 1 file changed, 1 insertion(+), 16 deletions(-) diff --git a/.github/workflows/security-build.yml b/.github/workflows/security-build.yml index f592eac7..138e33a3 100644 --- a/.github/workflows/security-build.yml +++ b/.github/workflows/security-build.yml @@ -1,24 +1,9 @@ - name: Security Build on: push: workflow_dispatch: {} - jobs: - golangci: - name: lint - runs-on: ubuntu-latest - steps: - - uses: actions/setup-go@v3 - with: - go-version: 1.17 - - uses: actions/checkout@v3 - - name: golangci-lint - uses: golangci/golangci-lint-action@v3 - with: - version: latest - govuln: name: Run govuln check and Publish runs-on: ubuntu-latest @@ -30,7 +15,7 @@ jobs: env: DEBUG: "true" with: - go-version: 1.18 # this mush match your code's golang version + go-version: 1.21.x vulncheck-version: latest package: ./... github-token: ${{ secrets.GITHUB_TOKEN }} From dfc268b270de2608dff50310f74efe83edbc2093 Mon Sep 17 00:00:00 2001 From: mtpoly <128363128+mt-polygon-technology@users.noreply.github.com> Date: Wed, 13 Mar 2024 16:26:44 +0100 Subject: [PATCH 5/5] Delete .github/workflows/sonar-cloud.yml --- .github/workflows/sonar-cloud.yml | 24 ------------------------ 1 file changed, 24 deletions(-) delete mode 100644 .github/workflows/sonar-cloud.yml diff --git a/.github/workflows/sonar-cloud.yml b/.github/workflows/sonar-cloud.yml deleted file mode 100644 index 1eb0f8fc..00000000 --- a/.github/workflows/sonar-cloud.yml +++ /dev/null @@ -1,24 +0,0 @@ -name: Security Build -on: - push: - branches: - - main - - dev - - staging - workflow_dispatch: {} - pull_request: - types: [opened, synchronize, reopened] - -jobs: - sonarcloud: - name: SonarCloud - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v3 - with: - fetch-depth: 0 - - name: SonarCloud Scan - uses: SonarSource/sonarcloud-github-action@master - env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any - SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}