Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat: add security check workflow [CE-220] #4790

Open
wants to merge 28 commits into
base: develop
Choose a base branch
from
Open

feat: add security check workflow [CE-220] #4790

wants to merge 28 commits into from

Commits on Apr 26, 2022

  1. feat: add security checks

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    779f880 View commit details
    Browse the repository at this point in the history

  2. use portainer custom build of gosec

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    0fd1d59 View commit details
    Browse the repository at this point in the history

  3. use official gosec image, it's ready to publish sarif

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    d2974c9 View commit details
    Browse the repository at this point in the history

  4. tmp: download deps

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    0290b83 View commit details
    Browse the repository at this point in the history

  5. official image isn't ready

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    313c697 View commit details
    Browse the repository at this point in the history

  6. add nancy

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    5b8dd37 View commit details
    Browse the repository at this point in the history

  7. fix nancy url

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    031a096 View commit details
    Browse the repository at this point in the history

  8. remove pr trigger

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    50bcc58 View commit details
    Browse the repository at this point in the history

  9. debug

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    9a32718 View commit details
    Browse the repository at this point in the history

  10. debug

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    d72571b View commit details
    Browse the repository at this point in the history

  11. debug

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    eab6282 View commit details
    Browse the repository at this point in the history

  12. debug

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    ec3a2e1 View commit details
    Browse the repository at this point in the history

  13. Clean up nancy run

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    9c32ad2 View commit details
    Browse the repository at this point in the history

  14. add snyk to scan js vulnerabilities

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    0cccfb5 View commit details
    Browse the repository at this point in the history

  15. separate scheduled and pr-bound actions

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    74cc099 View commit details
    Browse the repository at this point in the history

  16. amend names

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    a181db9 View commit details
    Browse the repository at this point in the history

  17. feat: add security checks

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    020687c View commit details
    Browse the repository at this point in the history

  18. use portainer custom build of gosec

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    00ae128 View commit details
    Browse the repository at this point in the history

  19. use official gosec image, it's ready to publish sarif

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    4df571a View commit details
    Browse the repository at this point in the history

  20. tmp: download deps

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    bd0e285 View commit details
    Browse the repository at this point in the history

  21. official image isn't ready

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    c085889 View commit details
    Browse the repository at this point in the history

  22. add nancy

    @DimaSalakhov @oscarzhou-portainer
    DimaSalakhov authored and oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    f8f95ba View commit details
    Browse the repository at this point in the history

  23. feat: add docker image vulnerability scanning with trivy

    @oscarzhou-portainer
    oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    61850e1 View commit details
    Browse the repository at this point in the history

  24. feat/ce-220-security-scan

    @oscarzhou-portainer
    oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    bb7fbeb View commit details
    Browse the repository at this point in the history

  25. chore(ci/security): use SLACK_WEBHOOK_URL

    @oscarzhou-portainer
    oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    83fd6aa View commit details
    Browse the repository at this point in the history

  26. feat(ci/security): add separated code security scanning workflows

    @oscarzhou-portainer
    oscarzhou-portainer committed Apr 26, 2022
    Configuration menu
    Copy the full SHA
    67f30b3 View commit details
    Browse the repository at this point in the history

Commits on Apr 27, 2022

  1. feat(ci/security): add paths for pull_request event trigger

    @oscarzhou-portainer
    oscarzhou-portainer committed Apr 27, 2022
    Configuration menu
    Copy the full SHA
    7122ba3 View commit details
    Browse the repository at this point in the history

  2. chore(ci/security): force to trigger nightly scan

    @oscarzhou-portainer
    oscarzhou-portainer committed Apr 27, 2022
    Configuration menu
    Copy the full SHA
    8d3e463 View commit details
    Browse the repository at this point in the history