dependabot[bot]
3be3aeb080
Bump actions/checkout from 5 to 6
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-21 11:04:46 +00:00
El RIDO
51eff47614
apply explicit permissions as per CodeQL suggestion
...
as per rule ID actions/missing-workflow-permissions
2025-10-10 15:07:44 +02:00
El RIDO
ee531a0b81
update codeql actions to release 4 (node 24) and enable github action scanning
2025-10-08 08:45:06 +02:00
El RIDO
e775647206
attempting to make the condition list more readable
2025-09-13 07:56:54 +02:00
El RIDO
86b1a4e9ac
disable running snyk if triggering user doesn't have access to the secret
2025-09-13 07:20:25 +02:00
dependabot[bot]
09bab8744f
Bump actions/checkout from 4 to 5
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-12 17:11:00 +00:00
El RIDO
b32efe0187
disable snyk scan on forks, they won't have the necessary secret
2024-05-30 07:54:19 +02:00
dependabot[bot]
03e3e4fa06
Bump github/codeql-action from 2 to 3
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-12-14 11:52:46 +00:00
dependabot[bot]
5bd2eb97e6
Bump actions/checkout from 3 to 4
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-09-05 11:13:01 +00:00
dependabot[bot]
b6f35fc8ab
Bump actions/checkout from 2 to 3
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-06-10 03:02:26 +00:00
El RIDO
2c01892ee1
bump github/codeql-action from 1 to 2
2022-04-28 19:47:28 +02:00
El RIDO
197c4a34e8
fix snyk
2021-06-05 08:25:19 +02:00
El RIDO
7a3a306ddc
fix snyk
2021-06-05 08:22:50 +02:00
El RIDO
cbdcaf4c30
fix snyk
2021-06-05 08:14:04 +02:00
El RIDO
371dca1986
ensure the GCS library and dependencies get included in the scan
2021-06-05 08:10:12 +02:00
rugk
8bc97517fb
Add Snyk security scan for PHP
...
After I found https://github.com/PrivateBin/docker-nginx-fpm-alpine/pull/44 I saw they also support PHP, so let's do it here (one level before container packaging), too.
Also it complements the CodeQL analysis, which only covers the JS part.
I added the API token to the PrivateBIn org now.
2021-06-04 23:43:01 +02:00
