FazBrowse GitHub Viewer
|
Trending
|
URL:
|
Home
Tools:
[Download Repo ZIP]
[View Raw Code]
[Original HTTPS Page]
code-server/.github/workflows/security.yaml at asher/enable-webkit · coder/code-server · GitHub
coder
code-server
Repository navigation
Code
Issues
143
(143)
Pull requests
12
(12)
Discussions
Actions
Projects
Security and quality
1
(1)
Insights
Expand file tree
Breadcrumbs
code-server
/
.github
/
workflows
/
security.yaml
Copy path
View runs
More file actions
More file actions
Latest commit
History
History
History
92 lines (79 loc) · 2.88 KB
Breadcrumbs
code-server
/
.github
/
workflows
/
security.yaml
Copy path
File metadata and controls
92 lines (79 loc) · 2.88 KB
Raw
Copy raw file
Download raw file
Open symbols panel
Edit and raw actions
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
name
:
Security
on
:
push
:
branches
:
[main]
paths
:
-
"
package.json
"
pull_request
:
paths
:
-
"
package.json
"
schedule
:
#
Runs every Monday morning PST
-
cron
:
"
17 15 * * 1
"
#
Cancel in-progress runs for pull requests when developers push additional
#
changes, and serialize builds in branches.
concurrency
:
group
:
${{ github.workflow }}-${{ github.ref }}
cancel-in-progress
:
${{ github.event_name == 'pull_request' }}
jobs
:
audit
:
name
:
Audit node modules
runs-on
:
ubuntu-latest
timeout-minutes
:
15
steps
:
-
name
:
Checkout repo
uses
:
actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
#
v6
with
:
fetch-depth
:
0
-
name
:
Install Node.js
uses
:
actions/setup-node@820762786026740c76f36085b0efc47a31fe5020
#
v6
with
:
node-version-file
:
.node-version
-
name
:
Audit npm for vulnerabilities
run
:
npm audit
if
:
success()
trivy-scan-repo
:
name
:
Scan repo with Trivy
permissions
:
contents
:
read
#
for actions/checkout to fetch code
security-events
:
write
#
for github/codeql-action/upload-sarif to upload SARIF results
runs-on
:
ubuntu-22.04
steps
:
-
name
:
Checkout repo
uses
:
actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
#
v6
with
:
fetch-depth
:
0
-
name
:
Run Trivy vulnerability scanner in repo mode
uses
:
aquasecurity/trivy-action@d2a0b60797ff03db6132bd4e2b293f9b37081297
#
latest
with
:
scan-type
:
"
fs
"
scan-ref
:
"
.
"
ignore-unfixed
:
true
format
:
"
template
"
template
:
"
@/contrib/sarif.tpl
"
output
:
"
trivy-repo-results.sarif
"
severity
:
"
HIGH,CRITICAL
"
-
name
:
Upload Trivy scan results to GitHub Security tab
uses
:
github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3
#
v4
with
:
sarif_file
:
"
trivy-repo-results.sarif
"
codeql-analyze
:
permissions
:
actions
:
read
#
for github/codeql-action/init to get workflow details
contents
:
read
#
for actions/checkout to fetch code
security-events
:
write
#
for github/codeql-action/autobuild to send a status report
name
:
Analyze with CodeQL
runs-on
:
ubuntu-22.04
steps
:
-
name
:
Checkout repository
uses
:
actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
#
v6
#
Initializes the CodeQL tools for scanning.
-
name
:
Initialize CodeQL
uses
:
github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938
#
v4.37.9
with
:
config-file
:
./.github/codeql-config.yml
languages
:
javascript
-
name
:
Autobuild
uses
:
github/codeql-action/autobuild@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28
#
v4.37.8
-
name
:
Perform CodeQL Analysis
uses
:
github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938
#
v4.37.9
Back
|
FazBrowse Home
|
New Git URL