Code

Add immutable action check#2496

Code

Closed

sailikhith-stepsecurity wants to merge 104 commits intomainstep-security/secure-repo:mainfrom immutable_actionsstep-security/secure-repo:immutable_actionsCopy head branch name to clipboard

+563-18

Commits

Commits on Oct 21, 2022

• Merge pull request #1299 from Devils-Knight/fix-dependabot

  Show description for 8daceb1
  ashishkurmi

  authored
  8daceb1

  Copy full SHA for 8daceb1

Commits on Oct 25, 2022

• remediate files & packages

  Devils-Knight

  committed
  7105c41

  Copy full SHA for 7105c41

Commits on Oct 26, 2022

• mod tidy

  Devils-Knight

  committed
  b99b655

  Copy full SHA for b99b655

Commits on Nov 4, 2022

• add version comment to pinned actions

  Devils-Knight

  committed
  f6256ca

  Copy full SHA for f6256ca

Commits on Nov 7, 2022

• Merge pull request #1374 from Devils-Knight/comment

  Show description for ffdfe27
  varunsh-coder

  authored
  ffdfe27

  Copy full SHA for ffdfe27

• Merge branch 'int' into pr/1352

  varunsh-coder

  committed
  088800b

  Copy full SHA for 088800b

• Merge pull request #1352 from Devils-Knight/remediation

  Show description for 3da1738
  varunsh-coder

  authored
  3da1738

  Copy full SHA for 3da1738

Commits on Nov 9, 2022

• Update harden runner version

  varunsh-coder

  committed
  7bcb807

  Copy full SHA for 7bcb807

• Merge pull request #1379 from step-security/update-harden-harden-int

  Show description for cc5afdc
  varunsh-coder

  authored
  cc5afdc

  Copy full SHA for cc5afdc

Commits on Nov 19, 2022

• [UPDATE] Pin actions to vx.y.z format (#1469)

  Devils-Knight

  authored
  b994863

  Copy full SHA for b994863

Commits on Nov 21, 2022

• Update test command

  varunsh-coder

  committed
  e9482c1

  Copy full SHA for e9482c1

• Merge pull request #1476 from step-security/update-workflow-test-cmd

  Show description for 361b35a
  varunsh-coder

  authored
  361b35a

  Copy full SHA for 361b35a

• Update test cases

  varunsh-coder

  committed
  8e7b11c

  Copy full SHA for 8e7b11c

• Merge pull request #1477 from step-security/update-tests

  Show description for 4672343
  varunsh-coder

  authored
  4672343

  Copy full SHA for 4672343

• Merge branch 'main' into int

  varunsh-coder

  committed
  c096e5f

  Copy full SHA for c096e5f

Commits on Nov 30, 2022

• update pinning remediation

  Devils-Knight

  committed
  9c234e9

  Copy full SHA for 9c234e9

Commits on Dec 1, 2022

• Return secret metadata

  varunsh-coder

  committed
  a84a433

  Copy full SHA for a84a433

• Merge pull request #1597 from step-security/return-secret-metadata

  Show description for 787f313
  varunsh-coder

  authored
  787f313

  Copy full SHA for 787f313

• Update secrets.go

  varunsh-coder

  committed
  9372c3f

  Copy full SHA for 9372c3f

• Merge pull request #1598 from step-security/return-secret-metadata

  Show description for ea1fb43
  varunsh-coder

  authored
  ea1fb43

  Copy full SHA for ea1fb43

Commits on Dec 5, 2022

• Merge pull request #1582 from Devils-Knight/pinIssue

  Show description for 7906268
  varunsh-coder

  authored
  7906268

  Copy full SHA for 7906268

Commits on Dec 7, 2022

• configuring dependabot to use INT for upggrading dependencies

  ashishkurmi

  committed
  0e48ac5

  Copy full SHA for 0e48ac5

• Merge pull request #1618 from step-security/ak-dependabot-int

  Show description for e7de507
  ashishkurmi

  authored
  e7de507

  Copy full SHA for e7de507

Commits on Dec 8, 2022

• Merge branch 'main' into int

  varunsh-coder

  committed
  b57f3f7

  Copy full SHA for b57f3f7

• Merge branch 'main' into int

  varunsh-coder

  committed
  086252d

  Copy full SHA for 086252d

Commits on Dec 10, 2022

• [FEATURE] Added Template and addWorkflow function to generate Codeql Workflow (#1634)

  Devils-Knight

  authored
  582a89d

  Copy full SHA for 582a89d

• fixed typo

  Devils-Knight

  committed
  ee52f8f

  Copy full SHA for ee52f8f

Commits on Dec 12, 2022

• Merge pull request #1643 from Devils-Knight/issue

  Show description for ad10892
  varunsh-coder

  authored
  ad10892

  Copy full SHA for ad10892

Commits on Dec 14, 2022

• Update addworkflow.go

  varunsh-coder

  committed
  23233ec

  Copy full SHA for 23233ec

• Merge pull request #1657 from step-security/update-workflow-env

  Show description for 14cc00f
  varunsh-coder

  authored
  14cc00f

  Copy full SHA for 14cc00f

Commits on Dec 17, 2022

• Update template

  Show description for 1c68758
  varunsh-coder

  committed
  1c68758

  Copy full SHA for 1c68758

• Merge pull request #1667 from step-security/fix-template

  Show description for 8fe562e
  varunsh-coder

  authored
  8fe562e

  Copy full SHA for 8fe562e

Commits on Jan 4, 2023

• [FEATURE] Added template for Dependency-review and Scorecards (#1755)

  Devils-Knight

  authored
  7903c6b

  Copy full SHA for 7903c6b

Commits on Feb 9, 2023

• Merge branch 'main' into int

  varunsh-coder

  committed
  559d233

  Copy full SHA for 559d233

• Update expected-codeql.yml

  varunsh-coder

  committed
  e0c7869

  Copy full SHA for e0c7869

• Update reference from Secure-Workflow to Secure-Repo (#1905)

  Devils-Knight

  authored
  571b89a

  Copy full SHA for 571b89a

Commits on Feb 12, 2023

• Merge branch 'main' into int

  varunsh-coder

  committed
  0a7ecc9

  Copy full SHA for 0a7ecc9

• Update scorecards.yml

  Show description for a5395f3
  varunsh-coder

  authored
  a5395f3

  Copy full SHA for a5395f3

• Update expected-scorecards.yml

  Show description for 8673c00
  varunsh-coder

  authored
  8673c00

  Copy full SHA for 8673c00

Commits on Mar 9, 2023

• updated pinning docker image

  Devils-Knight

  committed
  09a145c

  Copy full SHA for 09a145c

• comment added

  Devils-Knight

  committed
  6d49773

  Copy full SHA for 6d49773

• update pin docker

  Devils-Knight

  committed
  abc34e3

  Copy full SHA for abc34e3

Commits on Mar 14, 2023

• Merge pull request #1989 from Devils-Knight/bug2

  Show description for e4612f7
  varunsh-coder

  authored
  e4612f7

  Copy full SHA for e4612f7

• Merge pull request #1988 from Devils-Knight/bug

  Show description for 97fa737
  varunsh-coder

  authored
  97fa737

  Copy full SHA for 97fa737

Commits on Mar 15, 2023

• fix pinning docker issue

  Devils-Knight

  committed
  acfa53b

  Copy full SHA for acfa53b

Commits on Mar 16, 2023

• Merge pull request #2006 from Devils-Knight/pinBug

  Show description for 01a8c09
  varunsh-coder

  authored
  01a8c09

  Copy full SHA for 01a8c09

• Merge branch 'main' into int

  varunsh-coder

  committed
  b9b32d3

  Copy full SHA for b9b32d3

• Trim comments

  arjundashrath

  committed
  7bc0089

  Copy full SHA for 7bc0089

Commits on Mar 17, 2023

• update docker action format

  Devils-Knight

  committed
  25f90b0

  Copy full SHA for 25f90b0

Commits on Mar 19, 2023

• Merge pull request #2014 from Devils-Knight/issue-docker

  Show description for 161b8b0
  varunsh-coder

  authored
  161b8b0

  Copy full SHA for 161b8b0

• Merge pull request #2010 from arjundashrath/main

  Show description for 4af0234
  varunsh-coder

  authored
  4af0234

  Copy full SHA for 4af0234

Commits on Mar 29, 2023

• update secureWorkflow

  Devils-Knight

  committed
  ff05a33

  Copy full SHA for ff05a33

• Merge pull request #2044 from Devils-Knight/updateSecure

  Show description for 03f4760
  ashishkurmi

  authored
  03f4760

  Copy full SHA for 03f4760

Commits on Apr 10, 2023

• Merge branch 'main' into int

  varunsh-coder

  committed
  adfb0fa

  Copy full SHA for adfb0fa

Commits on Apr 13, 2023

• Fix sentence and remove existing action comments (#2067)

  arjundashrath

  authored
  830739d

  Copy full SHA for 830739d

• Revert "Fix sentence and remove existing action comments (#2067)"

  Show description for eadfcec
  varunsh-coder

  committed
  eadfcec

  Copy full SHA for eadfcec

Commits on Apr 23, 2023

• Change comment removal logic (#2092)

  arjundashrath

  authored
  22dbc7f

  Copy full SHA for 22dbc7f

Commits on Apr 26, 2023

• [UPDATE] Add pre-commit hooks to catch linting issues (#2098)

  Devils-Knight

  authored
  6ecd88d

  Copy full SHA for 6ecd88d

Commits on Apr 30, 2023

• adding a workflow for reviewing code using stepsecurity code reviewer

  ashishkurmi

  committed
  837e44e

  Copy full SHA for 837e44e

• Merge pull request #2101 from step-security/ak-code-reviewer

  Show description for f101b58
  ashishkurmi

  authored
  f101b58

  Copy full SHA for f101b58

• adding permissions for code review workflow

  ashishkurmi

  committed
  953d1e1

  Copy full SHA for 953d1e1

• Merge pull request #2102 from step-security/ak-code-review-permissions

  Show description for e62e8f4
  ashishkurmi

  authored
  e62e8f4

  Copy full SHA for e62e8f4

Commits on May 1, 2023

• Update code-review.yml

  

  varunsh-coder

  authored and

  ashishkurmi

  committed
  d81817d

  Copy full SHA for d81817d

• Merge pull request #2105 from step-security/ak-main-to-int-code-review

  Show description for 9512ea4
  ashishkurmi

  authored
  9512ea4

  Copy full SHA for 9512ea4

• updated getHooks

  Devils-Knight

  committed
  9da4543

  Copy full SHA for 9da4543

Commits on May 2, 2023

• Merge pull request #2107 from Devils-Knight/upd

  Show description for cfc9d10
  varunsh-coder

  authored
  cfc9d10

  Copy full SHA for cfc9d10

Commits on May 7, 2023

• adding id-token write permission for code review action

  ashishkurmi

  committed
  76518e2

  Copy full SHA for 76518e2

• Merge pull request #2111 from step-security/ak-updating-code-reviewer-permissions

  Show description for 7dd4c19
  ashishkurmi

  authored
  7dd4c19

  Copy full SHA for 7dd4c19

Commits on May 14, 2023

• using ai-codewise int for dogfooding

  ashishkurmi

  committed
  1e3d19f

  Copy full SHA for 1e3d19f

• Merge pull request #2129 from step-security/ak-codewise-int

  Show description for ab6b1a0
  ashishkurmi

  authored
  ab6b1a0

  Copy full SHA for ab6b1a0

• adding int backend endpoint

  ashishkurmi

  committed
  0a314e6

  Copy full SHA for 0a314e6

• Merge pull request #2131 from step-security/ak-code-review-int-endpoint

  Show description for 287df91
  ashishkurmi

  authored
  287df91

  Copy full SHA for 287df91

Commits on May 16, 2023

• updated precommit filePath

  Devils-Knight

  committed
  2c6acf6

  Copy full SHA for 2c6acf6

• Merge pull request #2135 from Devils-Knight/fixPrecommit

  Show description for d83b06a
  varunsh-coder

  authored
  d83b06a

  Copy full SHA for d83b06a

Commits on May 18, 2023

• Merge branch 'main' into int

  varunsh-coder

  committed
  754651f

  Copy full SHA for 754651f

• Fix Dependabot config indentation issue (#2140)

  varunsh-coder

  authored
  69f0820

  Copy full SHA for 69f0820

Commits on Jul 3, 2023

• Merge branch 'main' into int

  varunsh-coder

  committed
  6ad2893

  Copy full SHA for 6ad2893

• Update pre-commit logic

  varunsh-coder

  committed
  32f4cc0

  Copy full SHA for 32f4cc0

• Merge pull request #2205 from step-security/pre-commit-line

  Show description for a45e0e3
  varunsh-coder

  authored
  a45e0e3

  Copy full SHA for a45e0e3

Commits on Jul 6, 2023

• Merge branch 'main' into int

  varunsh-coder

  committed
  0eb8144

  Copy full SHA for 0eb8144

Commits on Jul 12, 2023

• [StepSecurity] ci: Harden GitHub Actions

  Show description for 92198fc
  

  step-security-bot

  authored and

  ashishkurmi

  committed
  92198fc

  Copy full SHA for 92198fc

• Merge pull request #2230 from step-security/ak-int-harden-runner

  Show description for f1c6979
  ashishkurmi

  authored
  f1c6979

  Copy full SHA for f1c6979

Commits on Jul 26, 2023

• directory path test case added

  Devils-Knight

  committed
  cb9e08f

  Copy full SHA for cb9e08f

Commits on Aug 2, 2023

• Merge pull request #2257 from Devils-Knight/fix2

  Show description for 630c1e2
  varunsh-coder

  authored
  630c1e2

  Copy full SHA for 630c1e2

Commits on Jul 4, 2024

• update workflow templates to latest versions

  shubham-stepsecurity

  committed
  6423e32

  Copy full SHA for 6423e32

• bump codeql version

  shubham-stepsecurity

  committed
  7a92f67

  Copy full SHA for 7a92f67

• updating harden-runner version in code review workflow

  Show description for 1e0ada6
  ashishkurmi

  committed
  1e0ada6

  Copy full SHA for 1e0ada6

• Merge pull request #2461 from step-security/ak-codewise-hr-upgrade

  Show description for 729990c
  ashishkurmi

  authored
  729990c

  Copy full SHA for 729990c

• Merge pull request #2460 from step-security/issue2120

  Show description for 735c02a
  ashishkurmi

  authored
  735c02a

  Copy full SHA for 735c02a

• removing knowledge base for tomwillis608/detect-secrets-action as it does not exist

  Show description for 197383b
  ashishkurmi

  committed
  197383b

  Copy full SHA for 197383b

• Merge pull request #2464 from step-security/ak-remove-tomwillis608-detect-secrets-action

  Show description for 99b254c
  ashishkurmi

  authored
  99b254c

  Copy full SHA for 99b254c

Commits on Sep 6, 2024

• Do not set permissions for jobs with GITHUB_TOKEN in job level env

  shubham-stepsecurity

  committed
  fea221a

  Copy full SHA for fea221a

• Merge pull request #2480 from step-security/issue2479

  Show description for 95abd71
  varunsh-coder

  authored
  95abd71

  Copy full SHA for 95abd71

• Update KB and action tags

  varunsh-coder

  committed
  6f91094

  Copy full SHA for 6f91094

• Merge pull request #2481 from step-security/fix-tests

  Show description for 5259779
  varunsh-coder

  authored
  5259779

  Copy full SHA for 5259779

Commits on Sep 12, 2024

• add additional prms for scorecard template for private repos

  shubham-stepsecurity

  committed
  fa7c85b

  Copy full SHA for fa7c85b

Commits on Sep 16, 2024

• Merge pull request #2484 from step-security/issue2483

  Show description for 929021e
  varunsh-coder

  authored
  929021e

  Copy full SHA for 929021e

Commits on Jan 16, 2025

• add immutable action check

  sailikhith-stepsecurity

  committed
  4b43059

  Copy full SHA for 4b43059

• fix test

  sailikhith-stepsecurity

  committed
  93e48d5

  Copy full SHA for 93e48d5

• update kb by moving remove-disabled-formulae to remove-disabled-packages

  sailikhith-stepsecurity

  committed
  31acb70

  Copy full SHA for 31acb70

• removing unwanted change

  sailikhith-stepsecurity

  committed
  837f1d1

  Copy full SHA for 837f1d1

Commits on Jan 18, 2025

• mocking http server for unit tests

  sailikhith-stepsecurity

  committed
  fe96d6f

  Copy full SHA for fe96d6f

Commits on Jan 20, 2025

• updating pinnig logic to use immutable version instead of hash

  sailikhith-stepsecurity

  committed
  1283961

  Copy full SHA for 1283961

• Merge branch 'int' of github.com:step-security/secure-repo into immutable_actions

  sailikhith-stepsecurity

  committed
  3a3a0b2

  Copy full SHA for 3a3a0b2