DRCIT/snipe-it
1
0
Fork 0
mirror of https://github.com/snipe/snipe-it.git synced 2024-11-09 23:24:06 -08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
9396 commits 97 branches 266 tags 291 MiB
Commit graph

73 commits

Author SHA1 Message Date
snipe 2dd7690d2d
Merge pull request #12464 from snipe/dependabot/github_actions/docker/build-push-action-4 
Bump docker/build-push-action from 3 to 4
 2023-02-13 14:45:21 -08:00
Joe Ferguson dea175bd40
Don't auto assign feature requests to Snipe 2023-02-08 09:57:54 -06:00
dependabot[bot] ea0f505db7
Bump docker/build-push-action from 3 to 4 
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 3 to 4.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-06 08:07:13 +00:00
dependabot[bot] 2f20945516
Bump actions/checkout from 3.2.0 to 3.3.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.2.0...v3.3.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-09 08:06:28 +00:00
dependabot[bot] 25b33d657e
Bump actions/checkout from 3.1.0 to 3.2.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.1.0...v3.2.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-19 08:07:03 +00:00
dependabot[bot] 36eb51b52f
Bump actions/checkout from 2 to 3.1.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3.1.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-10 08:36:34 +00:00
dependabot[bot] 8443796cbe
Bump codacy/codacy-analysis-cli-action from 4.1.0 to 4.2.0 
Bumps [codacy/codacy-analysis-cli-action](https://github.com/codacy/codacy-analysis-cli-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/codacy/codacy-analysis-cli-action/releases)
- [Commits](https://github.com/codacy/codacy-analysis-cli-action/compare/v4.1.0...v4.2.0)

---
updated-dependencies:
- dependency-name: codacy/codacy-analysis-cli-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-09-27 21:33:19 +00:00
snipe 7a099bc268 Changed some autolabeler and code owners 
Signed-off-by: snipe <snipe@snipe.net>
 2022-07-15 18:51:57 -07:00
dependabot[bot] 1ae044b91e
Bump codacy/codacy-analysis-cli-action from 1.1.0 to 4.1.0 
Bumps [codacy/codacy-analysis-cli-action](https://github.com/codacy/codacy-analysis-cli-action) from 1.1.0 to 4.1.0.
- [Release notes](https://github.com/codacy/codacy-analysis-cli-action/releases)
- [Commits](https://github.com/codacy/codacy-analysis-cli-action/compare/1.1.0...v4.1.0)

---
updated-dependencies:
- dependency-name: codacy/codacy-analysis-cli-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-07-04 08:28:05 +00:00
snipe e550fb1a52
Merge pull request #11447 from snipe/dependabot/github_actions/docker/metadata-action-4 
Bump docker/metadata-action from 3 to 4
 2022-07-03 20:04:15 -07:00
snipe fc65bb020f
Merge pull request #11446 from snipe/dependabot/github_actions/docker/login-action-2 
Bump docker/login-action from 1 to 2
 2022-07-03 20:03:50 -07:00
snipe a4dfdcd90d
Merge pull request #11450 from snipe/dependabot/github_actions/docker/build-push-action-3 
Bump docker/build-push-action from 2 to 3
 2022-07-03 20:03:32 -07:00
snipe 16d2e34148
Merge pull request #11448 from snipe/dependabot/github_actions/docker/setup-buildx-action-2 
Bump docker/setup-buildx-action from 1 to 2
 2022-07-03 20:03:08 -07:00
dependabot[bot] 471cf117ab
Bump docker/build-push-action from 2 to 3 
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 2 to 3.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-07-01 18:36:55 +00:00
dependabot[bot] bf78bd4b8b
Bump github/codeql-action from 1 to 2 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 to 2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-07-01 18:36:50 +00:00
dependabot[bot] a0a0d7e344
Bump docker/setup-buildx-action from 1 to 2 
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 1 to 2.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-07-01 18:36:45 +00:00
dependabot[bot] a9361571d6
Bump docker/metadata-action from 3 to 4 
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 3 to 4.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Upgrade guide](https://github.com/docker/metadata-action/blob/master/UPGRADE.md)
- [Commits](https://github.com/docker/metadata-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-07-01 18:36:41 +00:00
dependabot[bot] 1a13be9b5d
Bump docker/login-action from 1 to 2 
Bumps [docker/login-action](https://github.com/docker/login-action) from 1 to 2.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-07-01 18:36:36 +00:00
snipe 0ed84c83c8
Merge pull request #11437 from turrisxyz/Dependabot-GitHub-Actions 
chore: Included githubactions in the dependabot config
 2022-07-01 11:35:58 -07:00
naveen cfa301f5ae chore: Included githubactions in the dependabot config 
This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.

Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot

GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot

https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
 2022-07-01 01:33:50 +00:00
naveen ac94aa8e46 chore: Set permissions for GitHub actions 
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
 2022-07-01 00:29:21 +00:00
snipe 4d773829f8
Merge pull request #10988 from bestlong/bestlong-patch-1 
Ensure schedule analysis job never runs on forked repos
 2022-06-13 19:45:36 -07:00
snipe 47fb323d90 Adding feature request file back 
Signed-off-by: snipe <snipe@snipe.net>
 2022-05-13 05:03:48 -07:00
snipe e4bd5be4fe Try deleting the issue template file because wtf? 
Signed-off-by: snipe <snipe@snipe.net>
 2022-05-13 05:03:27 -07:00
snipe c3e8c35063 Replaced feature request 
Signed-off-by: snipe <snipe@snipe.net>
 2022-05-12 22:15:02 -07:00
snipe aa04a9b2e2 Clear feature template to see if it fixes docker issue 
Signed-off-by: snipe <snipe@snipe.net>
 2022-05-12 22:14:49 -07:00
Shao Yu-Lung (Allen) 8a032ee040
fix type 2022-05-07 22:54:47 +08:00
Shao Yu-Lung (Allen) a835401cb2
skip run schedule analysis job on forked repos 2022-05-07 22:50:01 +08:00
snipe 2e03270fca Updated feature request YAML 
Signed-off-by: snipe <snipe@snipe.net>
 2022-05-05 19:06:25 -07:00
Shao Yu-Lung (Allen) 2cd7c7a357
Ensure analysis job never runs on forked repos 2022-04-28 16:51:53 +08:00
Maciej Domanski 374bed3f0c info update codeql 2022-03-21 09:51:29 +01:00
Maciej Domanski e09516d69b codeql sa 2022-03-17 12:10:44 +01:00
Maciej Domanski 0a98adb246
Update SA-phpstan.yml 2022-03-16 15:22:27 +01:00
Maciej Domanski 540f783ba2 phpstan-fixes 2022-03-16 15:11:40 +01:00
Maciej Domanski 967ee714a1 sa tooling 2022-03-16 12:14:18 +01:00
snipe 3a7cef15bd
Merge pull request #10423 from misilot/automated-image-build-github-actions 
Automatic Building of Docker Images and Pushing to DockerHub
 2021-12-13 11:32:57 -08:00
Thomas Misilo 5e58f60845 Adds an automatic build for Alpine Linux based Image 
This Fixes #10339, and allows for automatic building of the Alpine Linux
image, and push to docker-hub.

This will push a "latest-alpine" based on the master branch, a
"develop-alpine" based on the develop branch, and a v##.##.##-alpine
image based on any released version.

`DOCKER_USERNAME` and `DOCKER_ACCESS_TOKEN` do both need
to be added to the repository as secrets.
 2021-12-13 10:39:55 -06:00
Thomas Misilo a7760b331b Automatic Building of Docker Images and Pushing to DockerHub 
This allows for building and pushing of the Snipe-IT docker images
directly from GitHub to DockerHub.

This will push a "latest" based on the master branch, a
"develop" based on the develop branch, and a v##.##.##
image based on any released version.

`DOCKER_USERNAME` and `DOCKER_ACCESS_TOKEN` do both need
to be added to the repository as secrets.
 2021-12-13 10:39:04 -06:00
Bennett Blodinger 034eb5fb07 no markdown? 2021-09-02 17:48:38 -05:00
Bennett Blodinger 563edddfc5 add a feature request 2021-09-02 17:47:32 -05:00
Bennett Blodinger 391d4f839a formatting 2021-09-02 17:43:24 -05:00
Bennett Blodinger 51a359496a unique IDs 2021-09-02 17:37:47 -05:00
Bennett Blodinger 43b7c844b0 multiline 2021-09-02 17:32:31 -05:00
Bennett Blodinger a1674f8d58
Create config.yml 2021-09-02 17:29:36 -05:00
Bennett Blodinger a8a6950b7e
Delete Feature_request.md 2021-09-02 17:28:01 -05:00
Bennett Blodinger 4598fcf666
Delete Bug_report.md 2021-09-02 17:27:46 -05:00
Bennett Blodinger 37eac18c69
Create bug_report.yml 
Using the (currently in beta) https://docs.github.com/en/communities/using-templates-to-encourage-useful-issues-and-pull-requests/syntax-for-githubs-form-schema
 2021-09-02 17:27:27 -05:00
Bennett Blodinger ca3296b65a Update issue templates 2021-09-02 16:58:18 -05:00
snipe d90abdf86f
Snipe codeacy workflow (#9460) 
* Removed printerClass="NunoMaduro\Collision\Adapters\Phpunit\Printer"

Signed-off-by: snipe <snipe@snipe.net>

* fix ldap ad authentication filter query mechanism (#7441)

* Create SECURITY.md

* Create codacy-analysis.yml

Co-authored-by: Istvan Basa <basipottom@gmail.com>
 2021-04-20 22:17:37 -07:00
snipe ef7434b7ac Updated template 2020-11-09 19:11:18 -08:00