Commit 96ecae7

UlisesGasconNathanWalker

and

authored

Enhance Workflows Security (#5880)

* chore: remove CodeQL workflow in favor of the advance one References: - https://github.com/NativeScript/nativescript-cli/actions/workflows/codeql-advanced.yml - https://github.com/NativeScript/nativescript-cli/actions/workflows/codeql.yml * feat: define workflow permissions * feat: pin dependencies in workflows --------- Co-authored-by: Nathan Walker <walkerrunpdx@gmail.com>

1 parent b903cf9 commit 96ecae7Copy full SHA for 96ecae7

File tree

-68

lines changed

-68

lines changed

Lines changed: 6 additions & 3 deletions

Original file line number	Diff line number	Diff line change
`@@ -19,6 +19,9 @@ on:`
`19`	`19`	`schedule:`
`20`	`20`	`- cron: '21 2 * * 1'`
`21`	`21`
	`22`	`+permissions:`
	`23`	`+ contents: read`
	`24`	`+`
`22`	`25`	`jobs:`
`23`	`26`	`analyze:`
`24`	`27`	`name: Analyze (${{ matrix.language }})`
`@@ -57,7 +60,7 @@ jobs:`
`57`	`60`	`# your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages`
`58`	`61`	`steps:`
`59`	`62`	`- name: Checkout repository`
`60`		`- uses: actions/checkout@v5`
	`63`	`+ uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0`
`61`	`64`
`62`	`65`	# Add any setup steps before running the `github/codeql-action/init` action.
`63`	`66`	# This includes steps like installing compilers or runtimes (`actions/setup-node`
`@@ -67,7 +70,7 @@ jobs:`
`67`	`70`
`68`	`71`	`# Initializes the CodeQL tools for scanning.`
`69`	`72`	`- name: Initialize CodeQL`
`70`		`- uses: github/codeql-action/init@v3`
	`73`	`+ uses: github/codeql-action/init@d3678e237b9c32a6c9bffb3315c335f976f3549f # v3.30.2`
`71`	`74`	`with:`
`72`	`75`	`languages: ${{ matrix.language }}`
`73`	`76`	`build-mode: ${{ matrix.build-mode }}`
`@@ -95,6 +98,6 @@ jobs:`
`95`	`98`	`exit 1`
`96`	`99`
`97`	`100`	`- name: Perform CodeQL Analysis`
`98`		`- uses: github/codeql-action/analyze@v3`
	`101`	`+ uses: github/codeql-action/analyze@d3678e237b9c32a6c9bffb3315c335f976f3549f # v3.30.2`
`99`	`102`	`with:`
`100`	`103`	`category: "/language:${{matrix.language}}"`

Lines changed: 0 additions & 62 deletions

This file was deleted.

Lines changed: 2 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -24,9 +24,9 @@ jobs:`
`24`	`24`	`with:`
`25`	`25`	`egress-policy: audit`
`26`	`26`
`27`		`- - uses: actions/checkout@v5`
	`27`	`+ - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0`
`28`	`28`
`29`		`- - uses: actions/setup-node@v5`
	`29`	`+ - uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3.9.1`
`30`	`30`	`with:`
`31`	`31`	`node-version: 22.14.0`
`32`	`32`

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -28,7 +28,7 @@ jobs:`
`28`	`28`	`with:`
`29`	`29`	`egress-policy: audit`
`30`	`30`
`31`		`- - uses: actions/checkout@v5`
	`31`	`+ - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0`
`32`	`32`
`33`	`33`	`- name: Setup`
`34`	`34`	`run: npm install`

Comments

(0)