Skip to content

Commit c7460c7

Browse files
lucacomelucacome
committed
Update workflows
1 parent 18e8f98 commit c7460c7

File tree

10 files changed

+97
-38
lines changed

10 files changed

+97
-38
lines changed

‎.github/dependabot.yml

Lines changed: 8 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -1,21 +1,16 @@
11
version: 2
22
updates:
3-
- package-ecosystem: "github-actions"
4-
directory: "/"
3+
- package-ecosystem: github-actions
4+
directory: /
55
schedule:
66
interval: weekly
7-
reviewers:
8-
- "nginxinc/kic"
9-
- "ciarams87"
10-
- package-ecosystem: "gomod"
11-
directory: "/"
7+
8+
- package-ecosystem: gomod
9+
directory: /
1210
schedule:
1311
interval: weekly
14-
reviewers:
15-
- "nginxinc/kic"
16-
- package-ecosystem: "docker"
17-
directory: "/build"
12+
13+
- package-ecosystem: docker
14+
directory: /build
1815
schedule:
1916
interval: weekly
20-
reviewers:
21-
- "nginxinc/kic"

‎.github/workflows/ci.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,10 @@ on:
1313
env:
1414
DOCKER_PLATFORMS: "linux/arm,linux/arm64,linux/amd64,linux/ppc64le,linux/s390x,linux/mips64le,linux/386"
1515

16+
concurrency:
17+
group: ${{ github.ref_name }}-ci
18+
cancel-in-progress: true
19+
1620
permissions:
1721
contents: read
1822

‎.github/workflows/codeql-analysis.yml

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,11 @@ on:
2020
schedule:
2121
- cron: "24 0 * * 0"
2222

23-
permissions: # added using https://github.com/step-security/secure-workflows
23+
concurrency:
24+
group: ${{ github.ref_name }}-codeql
25+
cancel-in-progress: true
26+
27+
permissions:
2428
contents: read
2529

2630
jobs:

‎.github/workflows/dependabot-auto-merge.yml

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,21 @@
11
name: Dependabot auto-merge
22
on: pull_request_target
3+
34
permissions:
4-
pull-requests: write
5-
contents: write
5+
contents: read
6+
67
jobs:
78
dependabot:
89
runs-on: ubuntu-22.04
910
if: ${{ github.event.pull_request.user.login == 'dependabot[bot]' }}
11+
permissions:
12+
pull-requests: write
13+
contents: write
1014
steps:
1115
- name: Dependabot metadata
1216
id: dependabot-metadata
1317
uses: dependabot/fetch-metadata@c9c4182bf1b97f5224aee3906fd373f6b61b4526 # v1.6.0
18+
1419
- name: Enable auto-merge for Dependabot PRs
1520
run: gh pr merge --auto --squash "$PR_URL"
1621
env:

‎.github/workflows/dependency-review.yml

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
name: "Dependency Review"
2+
on:
3+
pull_request:
4+
branches:
5+
- main
6+
- release-*
7+
8+
concurrency:
9+
group: ${{ github.ref_name }}-deps-review
10+
cancel-in-progress: true
11+
12+
permissions:
13+
contents: read
14+
15+
jobs:
16+
dependency-review:
17+
runs-on: ubuntu-22.04
18+
permissions:
19+
contents: read # for actions/checkout
20+
pull-requests: write # for actions/dependency-review-action to post comments
21+
steps:
22+
- name: "Checkout Repository"
23+
uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
24+
25+
- name: "Dependency Review"
26+
uses: actions/dependency-review-action@1360a344ccb0ab6e9475edef90ad2f46bf8003b1 # v3.0.6
27+
with:
28+
config-file: "nginxinc/kubernetes-ingress/.github/dependency-review-config.yml@main"

‎.github/workflows/dockerhub-description.yml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,14 @@ on:
66
paths:
77
- README.md
88
- .github/workflows/dockerhub-description.yml
9+
10+
concurrency:
11+
group: ${{ github.ref_name }}-dockerhub
12+
cancel-in-progress: true
13+
14+
permissions:
15+
contents: read
16+
917
jobs:
1018
dockerHubDescription:
1119
runs-on: ubuntu-22.04

‎.github/workflows/fossa.yml

Lines changed: 8 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5,20 +5,24 @@ on:
55
branches:
66
- main
77
paths-ignore:
8-
- '**.md'
9-
- 'LICENSE'
8+
- "**.md"
9+
- "LICENSE"
1010

11-
permissions: # added using https://github.com/step-security/secure-workflows
11+
concurrency:
12+
group: ${{ github.ref_name }}-fossa
13+
cancel-in-progress: true
14+
15+
permissions:
1216
contents: read
1317

1418
jobs:
15-
1619
scan:
1720
name: Fossa
1821
runs-on: ubuntu-22.04
1922
steps:
2023
- name: Checkout Repository
2124
uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
25+
2226
- name: Scan
2327
uses: fossas/fossa-action@f61a4c0c263690f2ddb54b9822a719c25a7b608f # v1.3.1
2428
with:

‎.github/workflows/lint.yml

Lines changed: 11 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@ on:
55
branches:
66
- main
77
paths-ignore:
8-
- '**.md'
9-
- 'LICENSE'
8+
- "**.md"
9+
- "LICENSE"
1010
types:
1111
- opened
1212
- reopened
@@ -16,23 +16,28 @@ defaults:
1616
run:
1717
shell: bash
1818

19-
permissions: # added using https://github.com/step-security/secure-workflows
19+
concurrency:
20+
group: ${{ github.ref_name }}-lint
21+
cancel-in-progress: true
22+
23+
permissions:
2024
contents: read
2125

2226
jobs:
23-
2427
lint:
2528
permissions:
26-
contents: read # for actions/checkout to fetch code
27-
pull-requests: read # for golangci/golangci-lint-action to fetch pull requests
29+
contents: read # for actions/checkout to fetch code
30+
pull-requests: read # for golangci/golangci-lint-action to fetch pull requests
2831
name: Lint
2932
runs-on: ubuntu-22.04
3033
steps:
3134
- name: Checkout Repository
3235
uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
36+
3337
- name: Output Variables
3438
id: vars
3539
run: echo "go_version=$(grep "go 1." go.mod | cut -d " " -f 2)" >> $GITHUB_OUTPUT
40+
3641
- name: Setup Golang Environment
3742
uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1
3843
with:

‎.github/workflows/notifications.yml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,10 +11,16 @@ on:
1111
types:
1212
- completed
1313

14+
permissions:
15+
contents: read
16+
1417
jobs:
1518
on-failure:
1619
runs-on: ubuntu-22.04
1720
if: ${{ github.event.workflow_run.conclusion == 'failure' }}
21+
permissions:
22+
contents: read
23+
actions: read # for 8398a7/action-slack
1824
steps:
1925
- name: Data
2026
uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6.4.1

‎.github/workflows/stale.yml

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -1,29 +1,29 @@
1-
name: 'Close stale issues and PRs'
1+
name: "Close stale issues and PRs"
22
on:
33
schedule:
4-
- cron: '30 1 * * *'
4+
- cron: "30 1 * * *"
55

6-
permissions: # added using https://github.com/step-security/secure-workflows
6+
permissions:
77
contents: read
88

99
jobs:
1010
stale:
1111
permissions:
12-
issues: write # for actions/stale to close stale issues
13-
pull-requests: write # for actions/stale to close stale PRs
12+
issues: write # for actions/stale to close stale issues
13+
pull-requests: write # for actions/stale to close stale PRs
1414
runs-on: ubuntu-22.04
1515
steps:
1616
- uses: actions/stale@1160a2240286f5da8ec72b1c0816ce2481aabf84 # v8.0.0
1717
with:
1818
repo-token: ${{ secrets.GITHUB_TOKEN }}
19-
stale-issue-message: 'This issue is stale because it has been open 90 days with no activity. Remove stale label or comment or this will be closed in 10 days.'
20-
stale-pr-message: 'This PR is stale because it has been open 90 days with no activity. Remove stale label or comment or this will be closed in 10 days.'
21-
close-issue-message: 'This issue was closed because it has been stalled for 10 days with no activity.'
22-
close-pr-message: 'This PR was closed because it has been stalled for 10 days with no activity.'
23-
stale-issue-label: 'stale'
24-
stale-pr-label: 'stale'
19+
stale-issue-message: "This issue is stale because it has been open 90 days with no activity. Remove stale label or comment or this will be closed in 10 days."
20+
stale-pr-message: "This PR is stale because it has been open 90 days with no activity. Remove stale label or comment or this will be closed in 10 days."
21+
close-issue-message: "This issue was closed because it has been stalled for 10 days with no activity."
22+
close-pr-message: "This PR was closed because it has been stalled for 10 days with no activity."
23+
stale-issue-label: "stale"
24+
stale-pr-label: "stale"
2525
exempt-all-assignees: true
26-
exempt-issue-labels: 'proposal'
26+
exempt-issue-labels: "proposal"
2727
operations-per-run: 100
2828
days-before-stale: 90
2929
days-before-close: 10

0 commit comments

Comments
 (0)