mirror of
https://github.com/fluxcd/flux2.git
synced 2026-07-02 20:05:07 +00:00
7a53052d06
Bumps the ci group with 6 updates: | Package | From | To | | --- | --- | --- | | [fluxcd/gha-workflows/.github/workflows/backport.yaml](https://github.com/fluxcd/gha-workflows) | `0.10.0` | `0.11.0` | | [fluxcd/pkg](https://github.com/fluxcd/pkg) | `1.32.0` | `1.33.0` | | [replicatedhq/replicated-actions](https://github.com/replicatedhq/replicated-actions) | `1.26.0` | `1.27.0` | | [fluxcd/gha-workflows/.github/workflows/code-scan.yaml](https://github.com/fluxcd/gha-workflows) | `0.10.0` | `0.11.0` | | [fluxcd/gha-workflows/.github/workflows/labels-sync.yaml](https://github.com/fluxcd/gha-workflows) | `0.10.0` | `0.11.0` | | [fluxcd/gha-workflows/.github/workflows/upgrade-fluxcd-pkg.yaml](https://github.com/fluxcd/gha-workflows) | `0.10.0` | `0.11.0` | Updates `fluxcd/gha-workflows/.github/workflows/backport.yaml` from 0.10.0 to 0.11.0 - [Release notes](https://github.com/fluxcd/gha-workflows/releases) - [Commits](https://github.com/fluxcd/gha-workflows/compare/v0.10.0...v0.11.0) Updates `fluxcd/pkg` from 1.32.0 to 1.33.0 - [Commits](f3ad4b56ad...5a7f3ce0de) Updates `replicatedhq/replicated-actions` from 1.26.0 to 1.27.0 - [Release notes](https://github.com/replicatedhq/replicated-actions/releases) - [Commits](291bef61a0...6803131db7) Updates `fluxcd/gha-workflows/.github/workflows/code-scan.yaml` from 0.10.0 to 0.11.0 - [Release notes](https://github.com/fluxcd/gha-workflows/releases) - [Commits](https://github.com/fluxcd/gha-workflows/compare/v0.10.0...v0.11.0) Updates `fluxcd/gha-workflows/.github/workflows/labels-sync.yaml` from 0.10.0 to 0.11.0 - [Release notes](https://github.com/fluxcd/gha-workflows/releases) - [Commits](https://github.com/fluxcd/gha-workflows/compare/v0.10.0...v0.11.0) Updates `fluxcd/gha-workflows/.github/workflows/upgrade-fluxcd-pkg.yaml` from 0.10.0 to 0.11.0 - [Release notes](https://github.com/fluxcd/gha-workflows/releases) - [Commits](https://github.com/fluxcd/gha-workflows/compare/v0.10.0...v0.11.0) --- updated-dependencies: - dependency-name: fluxcd/gha-workflows/.github/workflows/backport.yaml dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci - dependency-name: fluxcd/pkg dependency-version: 1.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci - dependency-name: replicatedhq/replicated-actions dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci - dependency-name: fluxcd/gha-workflows/.github/workflows/code-scan.yaml dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci - dependency-name: fluxcd/gha-workflows/.github/workflows/labels-sync.yaml dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci - dependency-name: fluxcd/gha-workflows/.github/workflows/upgrade-fluxcd-pkg.yaml dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci ... Signed-off-by: dependabot[bot] <support@github.com>
19 lines
541 B
YAML
19 lines
541 B
YAML
name: scan
|
|
on:
|
|
workflow_dispatch:
|
|
push:
|
|
branches: [ 'main', 'release/**' ]
|
|
pull_request:
|
|
branches: [ 'main', 'release/**' ]
|
|
schedule:
|
|
- cron: '18 10 * * 3'
|
|
permissions: read-all
|
|
jobs:
|
|
analyze:
|
|
permissions:
|
|
contents: read # for reading the repository code.
|
|
security-events: write # for uploading the CodeQL analysis results.
|
|
uses: fluxcd/gha-workflows/.github/workflows/code-scan.yaml@v0.11.0
|
|
secrets:
|
|
github-token: ${{ secrets.GITHUB_TOKEN }}
|
|
fossa-token: ${{ secrets.FOSSA_TOKEN }}
|