DRCIT/snipe-it
1
0
Fork 0
mirror of https://github.com/snipe/snipe-it.git synced 2024-09-20 07:47:41 -07:00
Code Issues Actions 11 Packages Projects Releases Wiki Activity
11685 commits 89 branches 265 tags 290 MiB
Commit graph

51 commits

Author SHA1 Message Date
Marcus Moore 3d858b21fa Revert "Install Passport during test setup process" 
This reverts commit 690a5119f4.
 2023-11-09 15:29:31 -08:00
Marcus Moore 62b557f82c Revert "Add database migration step" 
This reverts commit 65e3696029.
 2023-11-09 15:29:19 -08:00
Marcus Moore 158c82ff5f Revert "Be explicit about database host" 
This reverts commit fd410c0281.
 2023-11-09 15:26:50 -08:00
Marcus Moore fd410c0281 Be explicit about database host 2023-11-09 15:20:41 -08:00
Marcus Moore 65e3696029 Add database migration step 2023-11-09 14:56:32 -08:00
Marcus Moore 690a5119f4 Install Passport during test setup process 2023-11-09 14:49:56 -08:00
Marcus Moore cc0653c68a Update GitHub test action to run on PHP 8.1 and 8.2 2023-11-09 14:42:47 -08:00
snipe 7c908fecd9
Merge pull request #12992 from spencerrlongg/features/12853 
Adds tag for docker builds
 2023-09-20 19:36:22 +01:00
snipe a8b2089275
Merge pull request #13627 from snipe/fixes/dependabot_13616 
Replaces #13616 - Bump docker/metadata-action from 4 to 5
 2023-09-18 22:20:06 +01:00
snipe a46a11d554 Replaces #13616 - Bump docker/metadata-action from 4 to 5 
Signed-off-by: snipe <snipe@snipe.net>
 2023-09-18 22:19:31 +01:00
snipe 10dcd8166b Replaces #13617 - Bump docker/setup-buildx-action from 2 to 3 
Signed-off-by: snipe <snipe@snipe.net>
 2023-09-18 22:17:24 +01:00
snipe 0cb4427a19 Bump docker/build-push-action from 4 to 5 
Signed-off-by: snipe <snipe@snipe.net>
 2023-09-18 22:15:18 +01:00
snipe 9ad73ed09a Bump docker/login-action from 2 to 3 (#13619) 
Signed-off-by: snipe <snipe@snipe.net>
 2023-09-18 22:13:09 +01:00
snipe c2fe9d490b Upgraded actions/checkout to v4 (via #13580) 
Signed-off-by: snipe <snipe@snipe.net>
 2023-09-11 13:25:44 +01:00
Marcus Moore 20457bd89e Run tests for PHP 7.4, 8.0, and 8.1.1 2023-08-23 15:53:34 -07:00
slong753 9a4ba78c19 oops, pattern 2023-05-09 23:41:21 -05:00
slong753 491f670215 I think this is what they're looking for 2023-05-09 22:52:00 -05:00
Zachary Fleck ef07f39ccf
remove space 2023-04-25 14:43:34 -04:00
Zachary Fleck aa223359d4
remove space 2023-04-25 14:42:09 -04:00
zacharyfleck 63ade327a5
add ARM64 architecture 2023-04-24 16:24:44 -04:00
dependabot[bot] 4537ab3d54
Bump docker/build-push-action from 3 to 4 
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 3 to 4.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-20 21:18:50 +00:00
snipe 4f772468e6 Bumped codacy workflow 
Relates to #12657 but for develop

Signed-off-by: snipe <snipe@snipe.net>
 2023-03-13 11:10:41 -07:00
Marcus Moore d707f2d391
Add GitHub Action to push translation sources to Crowdin 2023-02-28 09:07:34 -08:00
dependabot[bot] 2f20945516
Bump actions/checkout from 3.2.0 to 3.3.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.2.0...v3.3.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-09 08:06:28 +00:00
dependabot[bot] 25b33d657e
Bump actions/checkout from 3.1.0 to 3.2.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.1.0...v3.2.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-19 08:07:03 +00:00
dependabot[bot] 36eb51b52f
Bump actions/checkout from 2 to 3.1.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3.1.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-10 08:36:34 +00:00
dependabot[bot] 8443796cbe
Bump codacy/codacy-analysis-cli-action from 4.1.0 to 4.2.0 
Bumps [codacy/codacy-analysis-cli-action](https://github.com/codacy/codacy-analysis-cli-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/codacy/codacy-analysis-cli-action/releases)
- [Commits](https://github.com/codacy/codacy-analysis-cli-action/compare/v4.1.0...v4.2.0)

---
updated-dependencies:
- dependency-name: codacy/codacy-analysis-cli-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-09-27 21:33:19 +00:00
dependabot[bot] 1ae044b91e
Bump codacy/codacy-analysis-cli-action from 1.1.0 to 4.1.0 
Bumps [codacy/codacy-analysis-cli-action](https://github.com/codacy/codacy-analysis-cli-action) from 1.1.0 to 4.1.0.
- [Release notes](https://github.com/codacy/codacy-analysis-cli-action/releases)
- [Commits](https://github.com/codacy/codacy-analysis-cli-action/compare/1.1.0...v4.1.0)

---
updated-dependencies:
- dependency-name: codacy/codacy-analysis-cli-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-07-04 08:28:05 +00:00
snipe e550fb1a52
Merge pull request #11447 from snipe/dependabot/github_actions/docker/metadata-action-4 
Bump docker/metadata-action from 3 to 4
 2022-07-03 20:04:15 -07:00
snipe fc65bb020f
Merge pull request #11446 from snipe/dependabot/github_actions/docker/login-action-2 
Bump docker/login-action from 1 to 2
 2022-07-03 20:03:50 -07:00
snipe a4dfdcd90d
Merge pull request #11450 from snipe/dependabot/github_actions/docker/build-push-action-3 
Bump docker/build-push-action from 2 to 3
 2022-07-03 20:03:32 -07:00
snipe 16d2e34148
Merge pull request #11448 from snipe/dependabot/github_actions/docker/setup-buildx-action-2 
Bump docker/setup-buildx-action from 1 to 2
 2022-07-03 20:03:08 -07:00
dependabot[bot] 471cf117ab
Bump docker/build-push-action from 2 to 3 
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 2 to 3.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-07-01 18:36:55 +00:00
dependabot[bot] bf78bd4b8b
Bump github/codeql-action from 1 to 2 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 to 2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-07-01 18:36:50 +00:00
dependabot[bot] a0a0d7e344
Bump docker/setup-buildx-action from 1 to 2 
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 1 to 2.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-07-01 18:36:45 +00:00
dependabot[bot] a9361571d6
Bump docker/metadata-action from 3 to 4 
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 3 to 4.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Upgrade guide](https://github.com/docker/metadata-action/blob/master/UPGRADE.md)
- [Commits](https://github.com/docker/metadata-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-07-01 18:36:41 +00:00
dependabot[bot] 1a13be9b5d
Bump docker/login-action from 1 to 2 
Bumps [docker/login-action](https://github.com/docker/login-action) from 1 to 2.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-07-01 18:36:36 +00:00
naveen ac94aa8e46 chore: Set permissions for GitHub actions 
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
 2022-07-01 00:29:21 +00:00
snipe 4d773829f8
Merge pull request #10988 from bestlong/bestlong-patch-1 
Ensure schedule analysis job never runs on forked repos
 2022-06-13 19:45:36 -07:00
Shao Yu-Lung (Allen) 8a032ee040
fix type 2022-05-07 22:54:47 +08:00
Shao Yu-Lung (Allen) a835401cb2
skip run schedule analysis job on forked repos 2022-05-07 22:50:01 +08:00
Shao Yu-Lung (Allen) 2cd7c7a357
Ensure analysis job never runs on forked repos 2022-04-28 16:51:53 +08:00
Maciej Domanski 374bed3f0c info update codeql 2022-03-21 09:51:29 +01:00
Maciej Domanski e09516d69b codeql sa 2022-03-17 12:10:44 +01:00
Maciej Domanski 0a98adb246
Update SA-phpstan.yml 2022-03-16 15:22:27 +01:00
Maciej Domanski 540f783ba2 phpstan-fixes 2022-03-16 15:11:40 +01:00
Maciej Domanski 967ee714a1 sa tooling 2022-03-16 12:14:18 +01:00
snipe 3a7cef15bd
Merge pull request #10423 from misilot/automated-image-build-github-actions 
Automatic Building of Docker Images and Pushing to DockerHub
 2021-12-13 11:32:57 -08:00
Thomas Misilo 5e58f60845 Adds an automatic build for Alpine Linux based Image 
This Fixes #10339, and allows for automatic building of the Alpine Linux
image, and push to docker-hub.

This will push a "latest-alpine" based on the master branch, a
"develop-alpine" based on the develop branch, and a v##.##.##-alpine
image based on any released version.

`DOCKER_USERNAME` and `DOCKER_ACCESS_TOKEN` do both need
to be added to the repository as secrets.
 2021-12-13 10:39:55 -06:00
Thomas Misilo a7760b331b Automatic Building of Docker Images and Pushing to DockerHub 
This allows for building and pushing of the Snipe-IT docker images
directly from GitHub to DockerHub.

This will push a "latest" based on the master branch, a
"develop" based on the develop branch, and a v##.##.##
image based on any released version.

`DOCKER_USERNAME` and `DOCKER_ACCESS_TOKEN` do both need
to be added to the repository as secrets.
 2021-12-13 10:39:04 -06:00