Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: adopt annotions and remove gosec from codeql and move templates to .github repo #128

Merged
merged 16 commits into from
Feb 27, 2025

Conversation

morri-son
Copy link
Contributor

What this PR does / why we need it

adopt-exclusion-annotions-for-gosec

@morri-son morri-son requested a review from a team as a code owner February 24, 2025 10:06
@morri-son morri-son added area/ipcei Important Project of Common European Interest kind/chore chore, maintenance, etc. labels Feb 24, 2025
@morri-son morri-son enabled auto-merge (squash) February 24, 2025 10:14
@morri-son morri-son added this to the 2025-Q1 milestone Feb 24, 2025
@morri-son morri-son changed the title chore: adopt-exclusion-annotions-for-gosec chore: adopt annotions and remove gosec from codeql and move templates to .github repo Feb 24, 2025
@@ -77,4 +49,6 @@
github_token: ${{ secrets.GITHUB_TOKEN }}
blackducksca_url: ${{ secrets.BLACKDUCK_URL }}
blackducksca_token: ${{ secrets.BLACKDUCK_API_TOKEN }}
blackducksca_scan_full: false

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Blackduck SCA Scan' step
Uses Step
uses 'blackduck-inc/black-duck-security-scan' with ref 'v2.0.0', not a pinned commit hash
@morri-son morri-son merged commit f09a749 into main Feb 27, 2025
8 checks passed
@morri-son morri-son deleted the adopt-exclusion-annotions-for-gosec branch February 27, 2025 11:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/ipcei Important Project of Common European Interest kind/chore chore, maintenance, etc.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants