Skip to content

Update dependencies + hardening CI/CD #102

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 68 commits into from
Jun 19, 2022
Merged

Update dependencies + hardening CI/CD #102

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
68 commits
Select commit Hold shift + click to select a range
310b270
chore(deps): update timoa/nodejs-encryption-api-example digest to f73…
renovate-bot May 14, 2022
4a4678d
chore(deps): update dependency mocha to v10
renovate-bot May 14, 2022
2d36281
Merge pull request #94 from timoa/fix/deps/mocha-10.x
timoa May 16, 2022
013fc04
fix(deps): update dependency @snyk/protect to v1.915.0
renovate-bot May 16, 2022
ce5ba65
chore(deps): update github/codeql-action action to v2.1.11
renovate-bot May 17, 2022
556d9db
fix(deps): update dependency @snyk/protect to v1.917.0
renovate-bot May 18, 2022
653ad31
fix(deps): update dependency @snyk/protect to v1.918.0
renovate-bot May 19, 2022
429764a
fix(deps): update dependency @snyk/protect to v1.919.0
renovate-bot May 20, 2022
b98e794
fix(deps): update dependency @snyk/protect to v1.921.0
renovate-bot May 20, 2022
285934f
chore(deps): update docker/build-push-action action to v3
renovate-bot May 20, 2022
c65f6a0
chore(deps): update docker/login-action action to v2
renovate-bot May 20, 2022
fd9841d
Merge pull request #95 from timoa/fix/deps/docker-build-push-action-3.x
timoa May 21, 2022
70b37ec
Merge pull request #96 from timoa/fix/deps/docker-login-action-2.x
timoa May 21, 2022
5f2909a
chore(deps): update docker/metadata-action action to v4
renovate-bot May 21, 2022
b27b3bd
Merge pull request #97 from timoa/fix/deps/docker-metadata-action-4.x
timoa May 21, 2022
87c1cbd
chore(deps): update docker/setup-buildx-action action to v2
renovate-bot May 21, 2022
3682b94
chore(deps): update docker/setup-qemu-action action to v2
renovate-bot May 21, 2022
6aa308b
Merge pull request #98 from timoa/fix/deps/docker-setup-buildx-action…
timoa May 21, 2022
ff39af1
Merge pull request #99 from timoa/fix/deps/docker-setup-qemu-action-2.x
timoa May 21, 2022
10d64fc
fix(deps): update dependency @snyk/protect to v1.922.0
renovate-bot May 21, 2022
aac0108
chore(deps): update dependency espree to v9.3.2
renovate-bot May 21, 2022
14bba27
chore(deps): update dependency eslint to v8.15.0
renovate-bot May 21, 2022
ff098c2
chore(deps): update mongo digest to 50d8918
renovate-bot May 24, 2022
343b91a
fix(deps): update dependency @snyk/protect to v1.924.0
renovate-bot May 24, 2022
537ef49
chore(cicd): add the Harden Runner GitHub Action (audit)
timoa May 25, 2022
b7cdb3c
chore(deps): update step-security/harden-runner digest to dd5681a
renovate-bot May 25, 2022
43a35c3
fix(deps): update dependency @snyk/protect to v1.925.0
renovate-bot May 25, 2022
3a397cd
fix(deps): update dependency @fastify/helmet to v8.0.1
renovate-bot May 25, 2022
6c7c9af
fix(deps): update dependency @snyk/protect to v1.927.0
renovate-bot May 26, 2022
eed31d8
fix(deps): update dependency @snyk/protect to v1.928.0
renovate-bot May 27, 2022
4776543
fix(deps): update dependency @snyk/protect to v1.929.0
renovate-bot May 28, 2022
8a7e37d
fix(deps): update dependency @snyk/protect to v1.931.0
renovate-bot May 28, 2022
38771ad
chore(deps): update actions/setup-node action to v3.2.0
renovate-bot May 31, 2022
099574c
chore(deps): update github/codeql-action action to v2.1.12
renovate-bot Jun 1, 2022
4706f3c
chore(deps): update mongo digest to d8f4897
renovate-bot Jun 2, 2022
58297fc
chore(deps): update dependency eslint-plugin-react to v7.30.0
renovate-bot Jun 2, 2022
7879982
fix(deps): update dependency @snyk/protect to v1.932.0
renovate-bot Jun 3, 2022
3c4b86d
fix(deps): update dependency @snyk/protect to v1.933.0
renovate-bot Jun 3, 2022
a4e81d0
fix(deps): update dependency @snyk/protect to v1.934.0
renovate-bot Jun 3, 2022
1de671a
fix(deps): update dependency @snyk/protect to v1.935.0
renovate-bot Jun 4, 2022
c7f4e21
chore(deps): update actions/upload-artifact action to v3.1.0
renovate-bot Jun 4, 2022
a526e6d
chore(deps): update dependency eslint to v8.16.0
renovate-bot Jun 4, 2022
7ddf599
chore(cicd): update Harden GitHub Actions config after 1st audit
timoa Jun 5, 2022
c7ecce0
chore(cicd): fix domain blocked
timoa Jun 5, 2022
bd87e54
chore(deps): update mongo digest to 94cd915
renovate-bot Jun 7, 2022
20e0d9d
chore(deps): update node.js to v16.15.1
renovate-bot Jun 7, 2022
89b8206
chore(deps): update mongo digest to fdd0492
renovate-bot Jun 7, 2022
074bcb7
fix(deps): update dependency @fastify/helmet to v8.1.0
renovate-bot Jun 7, 2022
4eb66c1
fix(deps): update dependency @snyk/protect to v1.936.0
renovate-bot Jun 7, 2022
caeeec9
fix(deps): update dependency @snyk/protect to v1.939.0
renovate-bot Jun 9, 2022
9eb9994
fix(deps): update dependency @snyk/protect to v1.940.0
renovate-bot Jun 10, 2022
12d8398
chore(deps): update step-security/harden-runner digest to cdea734
renovate-bot Jun 12, 2022
c12657b
chore(deps): update mongo digest to 3745209
renovate-bot Jun 14, 2022
4f756e2
fix(deps): update dependency @snyk/protect to v1.942.0
renovate-bot Jun 14, 2022
fa99afd
fix(deps): update dependency @snyk/protect to v1.945.0
renovate-bot Jun 15, 2022
bec4b03
chore(deps): update mongo digest to 37e84d3
renovate-bot Jun 16, 2022
eed221f
chore(deps): update actions/setup-node action to v3.3.0
renovate[bot] Jun 17, 2022
4374b6a
fix(deps): update dependency @snyk/protect to v1.946.0
renovate[bot] Jun 17, 2022
0db1ccb
chore(deps): update dependency eslint to v8.17.0
renovate[bot] Jun 19, 2022
6f4c6e8
chore(cicd): add OWASP ZAP full scan
timoa Jun 19, 2022
d1613bb
fix(cicd): add wait for the app to start
timoa Jun 19, 2022
345aa34
fix(cicd): run the app in the background
timoa Jun 19, 2022
656eae4
chore(cicd): save the ZAP reports
timoa Jun 19, 2022
abda46c
chore(deps): update the Fastify Swagger dependency
timoa Jun 19, 2022
626aeaa
fix(swagger): fix package name for Fastify Swagger
timoa Jun 19, 2022
49be62f
fix(cicd): add different names for the SAST and ZAP reports
timoa Jun 19, 2022
8152e3d
fix(cicd): unblocked domains from Harden GitHub Actions
timoa Jun 19, 2022
2da9582
chore(cicd): update Harden Github Actions policy + remove unused ZAP …
timoa Jun 19, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
fix(deps): update dependency @snyk/protect to v1.921.0
  • Loading branch information
@renovate-bot
renovate-bot committed May 20, 2022
commit b98e7942c82e08a4f46d566009a3c1e50aac5c6f
14 changes: 7 additions & 7 deletions package-lock.json
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@
"dependencies": {
"@fastify/helmet": "8.0.0",
"@hapi/boom": "9.1.4",
"@snyk/protect": "1.919.0",
"@snyk/protect": "1.921.0",
"fastify": "3.29.0",
"fastify-healthcheck": "3.1.0",
"fastify-swagger": "5.2.0",
Expand Down