spring-security

Commit Graph

Author	SHA1	Message	Date
Steve Riesenberg	47a5665767	Use cache and user.name system property on Windows	4 years ago
Steve Riesenberg	aad60cc6af	Only run prerequisites job if on upstream repo	4 years ago
Steve Riesenberg	13e94935ae	Simplify dependency graph	4 years ago
Steve Riesenberg	6c29007fac	Use Spring Gradle Build Action Closes gh-11630	4 years ago
Steve Riesenberg	6ad567f0fa	Polish gh-11367	4 years ago
naveen	8c634f8a9d	Set permissions for GitHub actions Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com> Closes gh-11367	4 years ago
Steve Riesenberg	4fbbfd2c8b	Skip workflows on forks of spring-security	4 years ago
Steve Riesenberg	66da4301fc	Use cache and user.name system property on Windows	4 years ago
Steve Riesenberg	8929bd5abc	Only run prerequisites job if on upstream repo	4 years ago
Steve Riesenberg	e3d1405f67	Simplify dependency graph	4 years ago
Steve Riesenberg	e756a1df19	Use Spring Gradle Build Action Closes gh-11630	4 years ago
Steve Riesenberg	81fae2db2c	Polish gh-11367	4 years ago
naveen	054a3f0bc0	Set permissions for GitHub actions Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com> Closes gh-11367	4 years ago
Steve Riesenberg	9d248c7185	Skip workflows on forks of spring-security	4 years ago
Steve Riesenberg	865bf23ecc	Use cache and user.name system property on Windows	4 years ago
Steve Riesenberg	f86d30f4a1	Only run prerequisites job if on upstream repo	4 years ago
Steve Riesenberg	dc59d12405	Simplify dependency graph	4 years ago
Steve Riesenberg	bdeb32854e	Use Spring Gradle Build Action Closes gh-11630	4 years ago
Steve Riesenberg	3f4efedd23	Polish gh-11367	4 years ago
naveen	8f93a7fc94	Set permissions for GitHub actions Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>	4 years ago
Steve Riesenberg	aaf20e7b61	Build only on branches Issue gh-11480	4 years ago
Steve Riesenberg	fbc5839890	Build only on branches Issue gh-11480	4 years ago
Steve Riesenberg	631076e4dd	Build only on branches Issue gh-11480	4 years ago
Steve Riesenberg	148756076c	Backport release automation and github actions Closes gh-11501	4 years ago
Steve Riesenberg	d76c321f8c	Backport release automation and github actions Closes gh-11500	4 years ago
Steve Riesenberg	68bdb63faf	Use JDK 11 with spring-gradle-build-action	4 years ago
Steve Riesenberg	92d4f1237d	Use JDK 17 for Antora Issue gh-11430 Issue gh-11324	4 years ago
Steve Riesenberg	de45964f55	Backport release automation and github actions Closes gh-11480	4 years ago
Steve Riesenberg	095f23d81f	Fix slack notifications in #spring-security-ci Issue gh-11346	4 years ago
Marcus Da Coregio	c4a55b90e3	Antora generate workflow use JDK 17 Closes gh-11430	4 years ago
Steve Riesenberg	ac98e358a5	Add slack announcement when release is successful Closes gh-11307	4 years ago
Steve Riesenberg	d1cb236df5	Fix slack notifications in #spring-security-ci This change can be reverted if upgrading to a new version of Gamesight/slack-workflow-status with the fix available (> 1.1.0). Closes gh-11346	4 years ago
Rob Winch	592db9180d	Enable BackportBot on 5.6.x	4 years ago
Rob Winch	3d5e5ff556	Enable BackportBot on 5.7.x	4 years ago
Rob Winch	66592c1e66	Enable BackportBot on 5.8.x	4 years ago
Steve Riesenberg	07f28de79b	Polish gh-11184 Propagate rename in notify_result section.	4 years ago
Steve Riesenberg	46723a601c	Add workflow step for scheduling the next milestone This step introduces the concept of a release train to determine the appropriate release dates and schedules milestones as needed. It uses the following rules: - If the current SNAPSHOT version is a minor release (patchVersion == 0), checks to see if a GA release exists. If not, a release train is scheduled as follows: - Finds the next available release train starting month (including this month), either January or July. - Schedules a release train with M1, M2, M3, RC1 and GA versions on either January/February/March/April/May or July/August/September/October/November - If the current SNAPSHOT version is a patch release (patchVersion != 0), checks to see if a GA release exists. If not, an individual milestone is scheduled on the next even month whose release day is in the future (can include this month). - In either case, the release day used to schedule the release is based on the configured weekOfMonth (1-4) and dayOfWeek (1-5), e.g. 3rd Monday of the month (3, 1). If a milestone already exists, nothing is created. Once created, milestone due dates can be updated manually as desired. Closes gh-10458	4 years ago
Steve Riesenberg	ad19fc1330	Add workflow for scheduling releases on maintenance branches Closes gh-11180	4 years ago
Rob Winch	96caecc639	Disable pull request for backport-bot.yml	4 years ago
Rob Winch	a10f707b6e	Fix spacing in backport-bot.yml	4 years ago
Rob Winch	1d4bf88a0f	Cleanup backport-bot.yml Issue gh-11313	4 years ago
Rob Winch	b78a28be5f	Add backport-bot.yml Closes gh-11313	4 years ago
Josh Cummings	8a64084c82	Add to GitHub Actions CI	4 years ago
Steve Riesenberg	8e34b4c15e	Fix step id in conditional checks	4 years ago
Steve Riesenberg	8f4d003602	Revert "Add expression syntax to conditionals" This reverts commit `ea0b271a73`.	4 years ago
Steve Riesenberg	ea0b271a73	Add expression syntax to conditionals Issue gh-11158	4 years ago
Steve Riesenberg	d07c5e0804	Add quotes to boolean conditional checks Issue gh-11158	4 years ago
Steve Riesenberg	0c94cfca63	Fix conditional using env namespace at job level Issue gh-11158	4 years ago
Marcus Da Coregio	44e672d969	Use properties in the checkSamples job Issue gh-10344	4 years ago
Marcus Da Coregio	991d5c8817	Use properties in the checkSamples job Issue gh-10344	4 years ago

... 2 3 4 5 6 ...

367 Commits (820e3f57504a7fb8fcc8a74e06a481ab47a10ea2)