Josh Cummings
c9b0e3cc11
Align Snapshot Data and Reactor with Boot
...
Issue gh-13627
2 years ago
Josh Cummings
5fc042f0c0
Update Snapshot Build
...
Closes gh-13627
2 years ago
Rob Winch
8cfb6a4cdc
cralwer.algolia.com performs indexing
3 years ago
jongwooo
aad3e61f4d
chore: Use cache in continuous-integration-workflow.yml
...
Signed-off-by: jongwooo <jongwooo.han@gmail.com>
3 years ago
Steve Riesenberg
fa9c7fb50d
Remove 5.6.x from scheduled releases
3 years ago
Dan Allen
786db6dd5c
turn off scheduler for Deploy Docs workflow
3 years ago
Dan Allen
6bb36f1a54
sync and refactor docs build
...
- add 6.0.x to release scheduler workflow
- upgrade Antora to 3.2.0-alpha.2
- remove Antora patch to support linked worktrees
- upgrade Antora Collector to latest alpha
- remove dispatch.sh script (handled by gh run workflow)
- consistently use gh run workflow to trigger workflows
- remove step to publish generated docs (no longer in use)
3 years ago
Kirk Lin
9c6d90490d
ci: fix GitHub Actions Deprecating save-state and set-output commands
...
Closes gh-12032
3 years ago
Dan Allen
3f2bade4f1
sync and refactor docs build
...
- upgrade Antora to 3.2.0-alpha.2
- remove Antora patch to support linked worktrees
- upgrade Antora Collector to latest alpha
- remove dispatch.sh script (handled by gh run workflow)
- consistently use gh run workflow to trigger workflows
- remove step to publish generated docs (no longer in use)
3 years ago
Dan Allen
fe252f5057
sync docs build; upgrade Antora and Antora Collector to latest alpha
3 years ago
Dan Allen
2063279d89
fix deploy docs workflow
...
- don't use environment variable reference in checkout action
3 years ago
Dan Allen
b5bd52cb14
trigger partial docs build on push
3 years ago
Josh Cummings
ff055cf07a
Remote antoraUpdateVersion task from CI
3 years ago
Marcus Da Coregio
465d80c162
Remove antoreUpdateVersion task from release automation
3 years ago
Rob Winch
06c879b61a
Add Reference to Security Reporting
3 years ago
Marcus Da Coregio
7756247c3a
Simplify checkSamples task
...
Closes gh-11814
3 years ago
Dan Allen
b65b59d46c
consolidate docs CI workflows in main branch
...
- repurpose Deploy Docs as scheduler
- repurpose Rebuild Search Index as scheduler
3 years ago
Dan Allen
3387149a0f
repurpose 5.6.x branch to provide local docs build
...
* remove unused workflows, scripts, and configuration (now handled by docs-build branch)
* upgrade Antora to 3.1 (and Node.js to 16)
* tune playbook settings
* reconfigure docs build for local build only
* add patch to support using linked worktree as Antora content source
* remove Antora extensions not needed for local builds
3 years ago
Dan Allen
3e42119f84
repurpose 5.7.x branch to provide local docs build
...
* remove unused workflows, scripts, and configuration (now handled by docs-build branch)
* upgrade Antora to 3.1 (and Node.js to 16)
* tune playbook settings
* reconfigure docs build for local build only
* add patch to support using linked worktree as Antora content source
* remove Antora extensions not needed for local builds
3 years ago
Dan Allen
ab9ed26ad2
repurpose 5.8.x branch to provide local docs build
...
* remove unused workflows, scripts, and configuration (now handled by docs-build branch)
* upgrade Antora to 3.1 (and Node.js to 16)
* tune playbook settings
* reconfigure docs build for local build only
* add patch to support using linked worktree as Antora content source
* remove Antora extensions not needed for local builds
3 years ago
Dan Allen
d22ee32c7d
reconfigure branch for local builds and as scheduler for docs workflows
...
- set up placeholder and trigger for Deploy Docs workflow in docs-build branch
- set up placeholder and trigger for Rebuild Search Index workflow in docs-build branch
- remove obsolete Deploy Reference workflow
- upgrade Antora to 3.1
- reconfigure docs build for local build only
- add patch to support using linked worktree as Antora content source
- remove Antora extensions only needed for the production docs build
3 years ago
Rob Winch
8c69699458
Remove backportbot.yml
...
Issue gh-11736
3 years ago
Steve Riesenberg
02459919cc
Skip workflows on forks of spring-security
3 years ago
Steve Riesenberg
57d212ddca
Use cache and user.name system property on Windows
3 years ago
Steve Riesenberg
539b17f6da
Only run prerequisites job if on upstream repo
3 years ago
Steve Riesenberg
37e1ad27fe
Simplify dependency graph
3 years ago
Steve Riesenberg
043fdd6f03
Use Spring Gradle Build Action
...
Closes gh-11630
3 years ago
Steve Riesenberg
3234e05085
Polish gh-11367
3 years ago
naveen
f957e3c051
Set permissions for GitHub actions
...
Restrict the GitHub token permissions only to the required ones; this
way, even if the attackers will succeed in compromising your workflow,
they won’t be able to do much.
- Included permissions for the action.
https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests
https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
Closes gh-11367
3 years ago
Steve Riesenberg
24033be046
Skip workflows on forks of spring-security
3 years ago
Steve Riesenberg
47a5665767
Use cache and user.name system property on Windows
3 years ago
Steve Riesenberg
aad60cc6af
Only run prerequisites job if on upstream repo
3 years ago
Steve Riesenberg
13e94935ae
Simplify dependency graph
3 years ago
Steve Riesenberg
6c29007fac
Use Spring Gradle Build Action
...
Closes gh-11630
3 years ago
Steve Riesenberg
6ad567f0fa
Polish gh-11367
3 years ago
naveen
8c634f8a9d
Set permissions for GitHub actions
...
Restrict the GitHub token permissions only to the required ones; this
way, even if the attackers will succeed in compromising your workflow,
they won’t be able to do much.
- Included permissions for the action.
https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests
https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
Closes gh-11367
3 years ago
Steve Riesenberg
4fbbfd2c8b
Skip workflows on forks of spring-security
3 years ago
Steve Riesenberg
66da4301fc
Use cache and user.name system property on Windows
3 years ago
Steve Riesenberg
8929bd5abc
Only run prerequisites job if on upstream repo
3 years ago
Steve Riesenberg
e3d1405f67
Simplify dependency graph
3 years ago
Steve Riesenberg
e756a1df19
Use Spring Gradle Build Action
...
Closes gh-11630
3 years ago
Steve Riesenberg
81fae2db2c
Polish gh-11367
3 years ago
naveen
054a3f0bc0
Set permissions for GitHub actions
...
Restrict the GitHub token permissions only to the required ones; this
way, even if the attackers will succeed in compromising your workflow,
they won’t be able to do much.
- Included permissions for the action.
https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests
https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
Closes gh-11367
3 years ago
Steve Riesenberg
9d248c7185
Skip workflows on forks of spring-security
3 years ago
Steve Riesenberg
865bf23ecc
Use cache and user.name system property on Windows
3 years ago
Steve Riesenberg
f86d30f4a1
Only run prerequisites job if on upstream repo
3 years ago
Steve Riesenberg
dc59d12405
Simplify dependency graph
3 years ago
Steve Riesenberg
bdeb32854e
Use Spring Gradle Build Action
...
Closes gh-11630
3 years ago
Steve Riesenberg
3f4efedd23
Polish gh-11367
3 years ago
naveen
8f93a7fc94
Set permissions for GitHub actions
...
Restrict the GitHub token permissions only to the required ones; this
way, even if the attackers will succeed in compromising your workflow,
they won’t be able to do much.
- Included permissions for the action.
https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests
https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
3 years ago