You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cordova.apache.org by dp...@apache.org on 2024/11/19 07:49:38 UTC
(cordova-ios) branch master updated: chore(ci): Add code scanning & fix dependabot failures (#1505)
This is an automated email from the ASF dual-hosted git repository.
dpogue pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cordova-ios.git
The following commit(s) were added to refs/heads/master by this push:
new 74bfae84 chore(ci): Add code scanning & fix dependabot failures (#1505)
74bfae84 is described below
commit 74bfae8402831b393273388e7892f4876fdf261e
Author: Darryl Pogue <da...@dpogue.ca>
AuthorDate: Mon Nov 18 23:49:33 2024 -0800
chore(ci): Add code scanning & fix dependabot failures (#1505)
---
.github/workflows/ci.yml | 32 +++++++++++++++++++++++++++++++-
.github/workflows/release-audit.yml | 8 +++++++-
2 files changed, 38 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e9fa5e54..38c57015 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,7 +17,13 @@
name: Node CI
-on: [push, pull_request]
+on:
+ push:
+ branches-ignore:
+ - 'dependabot/**'
+ pull_request:
+ branches:
+ - '*'
jobs:
darwin:
@@ -41,6 +47,16 @@ jobs:
node --version
npm --version
+ - uses: github/codeql-action/init@v3
+ with:
+ languages: javascript
+ queries: security-and-quality
+ config: |
+ paths-ignore:
+ - coverage
+ - node_modules
+ - templates/project/www/cordova.js
+
- name: npm install and test
run: |
npm i -g ios-deploy
@@ -48,6 +64,8 @@ jobs:
env:
CI: true
+ - uses: github/codeql-action/analyze@v3
+
- uses: codecov/codecov-action@v4
if: success()
with:
@@ -76,6 +94,16 @@ jobs:
node --version
npm --version
+ - uses: github/codeql-action/init@v3
+ with:
+ languages: javascript
+ queries: security-and-quality
+ config: |
+ paths-ignore:
+ - coverage
+ - node_modules
+ - templates/project/www/cordova.js
+
- name: npm install and test
run: |
npm ci
@@ -84,6 +112,8 @@ jobs:
env:
CI: true
+ - uses: github/codeql-action/analyze@v3
+
- uses: codecov/codecov-action@v4
if: success()
with:
diff --git a/.github/workflows/release-audit.yml b/.github/workflows/release-audit.yml
index 83090944..afc296ff 100644
--- a/.github/workflows/release-audit.yml
+++ b/.github/workflows/release-audit.yml
@@ -17,7 +17,13 @@
name: Release Auditing
-on: [push, pull_request]
+on:
+ push:
+ branches-ignore:
+ - 'dependabot/**'
+ pull_request:
+ branches:
+ - '*'
jobs:
test:
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org