Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

improve OSSF score #2125

Merged
merged 1 commit into from Jan 17, 2024
Merged

improve OSSF score #2125

merged 1 commit into from Jan 17, 2024

Conversation

mmorel-35
Copy link
Contributor

@mmorel-35 mmorel-35 commented Jan 17, 2024

What does this PR do?

Pin github-actions dependencies and define permissions on workflows and jobs when necessary

Why is it important?

This help improve OSSF score

Signed-off-by: Matthieu MOREL matthieu.morel35@gmail.com

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
@mmorel-35 mmorel-35 requested a review from a team as a code owner January 17, 2024 19:13
Copy link

netlify bot commented Jan 17, 2024

Deploy Preview for testcontainers-go ready!

Name Link
🔨 Latest commit 411186f
🔍 Latest deploy log https://app.netlify.com/sites/testcontainers-go/deploys/65a826faa8106a0008f02284
😎 Deploy Preview https://deploy-preview-2125--testcontainers-go.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

Copy link
Collaborator

@mdelapenya mdelapenya left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks!

@mdelapenya mdelapenya self-assigned this Jan 17, 2024
@mdelapenya mdelapenya added the chore Changes that do not impact the existing functionality label Jan 17, 2024
@mdelapenya mdelapenya merged commit 0907f2a into testcontainers:main Jan 17, 2024
120 checks passed
@mmorel-35 mmorel-35 deleted the ossf branch January 17, 2024 21:56
mdelapenya added a commit to jespino/testcontainers-go that referenced this pull request Jan 18, 2024
* main:
  enable golangci-lint for redis module (testcontainers#2126)
  Go install gotestsum and golangci-lint  (testcontainers#2127)
  improve OSSF score (testcontainers#2125)
  chore: run make lint on new modules (testcontainers#2122)
  enable golangci-lint for pulsar (testcontainers#2121)
  lint: enable testifylint (testcontainers#2120)
  chore(deps): bump github.com/nats-io/nats.go in /modules/nats (testcontainers#2094)
  chore(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0 (testcontainers#2104)
  Revert "chore(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0 (testcontainers#2088)"
mdelapenya added a commit that referenced this pull request Jan 20, 2024
….com/docker/compose/v2-2.24.0

* main:
  pin Docker images version (#2129)
  enable golangci-lint for examples (#2128)
  chore(deps): bump github.com/neo4j/neo4j-go-driver/v5 in /modules/neo4j (#2098)
  enable golangci-lint for redis module (#2126)
  Go install gotestsum and golangci-lint  (#2127)
  improve OSSF score (#2125)
mdelapenya added a commit to mdelapenya/testcontainers-go that referenced this pull request Jan 24, 2024
* main: (25 commits)
  chore(deps): bump github.com/dvsekhvalnov/jose2go in /modules/pulsar (testcontainers#2136)
  fix: skip-host-cache option removed in latest MySQL 8.3.0 version (testcontainers#2130)
  chore: skip assertions for Docker Rootless (testcontainers#2135)
  pin Docker images version (testcontainers#2129)
  enable golangci-lint for examples (testcontainers#2128)
  chore(deps): bump github.com/neo4j/neo4j-go-driver/v5 in /modules/neo4j (testcontainers#2098)
  enable golangci-lint for redis module (testcontainers#2126)
  Go install gotestsum and golangci-lint  (testcontainers#2127)
  improve OSSF score (testcontainers#2125)
  chore: run make lint on new modules (testcontainers#2122)
  enable golangci-lint for pulsar (testcontainers#2121)
  lint: enable testifylint (testcontainers#2120)
  chore(deps): bump github.com/nats-io/nats.go in /modules/nats (testcontainers#2094)
  chore(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0 (testcontainers#2104)
  Revert "chore(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0 (testcontainers#2088)"
  chore(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0 (testcontainers#2088)
  chore(deps): bump cloud.google.com/go/spanner from 1.54.0 to 1.55.0, google.golang.org/api from 0.154.0 to 0.156.0 in /modules/gcloud (testcontainers#2115)
  chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.10 to 1.26.3, github.com/aws/aws-sdk-go from 1.48.13 to 1.49.19 in /modules/localstack (testcontainers#2114)
  chore(deps): bump github.com/docker/go-connections from 0.4.0 to 0.5.0 (testcontainers#2113)
  Adding mockserver module (testcontainers#2085)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
chore Changes that do not impact the existing functionality
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants