-
Notifications
You must be signed in to change notification settings - Fork 0
Bump minimist from 1.2.5 to 1.2.7 in /cer-graphql #356
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Changes from all commits
92ae5b6
30077a9
afe593d
5b3e5a5
05c67dd
2a23346
a823c0c
79c8f6a
f644f4e
9b16683
11e269c
3ecf0eb
c632cc1
bc92bbb
24bf09c
b97f2c8
f1eaefd
47b7122
af1fdf3
b0d934f
e5f8f17
9c21a36
68bd9f9
ed7868d
0e533f0
caded95
4021ed8
bce4a6c
7fa37c8
598aad3
a873ad2
f699a88
e1702f7
af37054
f1a72b9
8029458
7b06148
712a773
c0dd75a
fa63cc1
29f8ad1
75e83f2
ac0a474
17f18a1
6837b6c
e2aa65d
71b6b9e
a4b7875
0627388
cc31dff
1d468df
0cc3aa5
4c60400
bc98231
7f7905e
39ef5aa
42a543d
6508af7
01a0e40
fa8734b
17c6645
6f8c141
0b0f74d
029f140
f6c8388
190d6e3
247adfd
635e37f
e14519e
d564a59
782c5e3
452f69f
e8ff9f9
cb211ee
bdebb83
c2f4662
4f7bbe8
30d955d
71c2500
4c0c45c
f3faa4d
d502a2c
c6af960
7e62b76
5c2664b
c829cc3
76ae67e
cb0d7ef
7ab8e7e
618761b
df34804
bc31e12
a93d2d3
9f5ef19
05a5591
adad505
8cdb531
922e6d4
0d6e811
5b91912
0be0e37
6d4a0ac
6353590
4838e16
6d510c4
9c80f5b
dde134a
32af252
5e9bdb6
8c0ca7a
7700172
f042bda
3db4927
03194ac
60e03d0
3cf9d40
804b42a
1794370
109f11c
4f6f66b
967be11
f086c38
58b7a6b
5df8c76
e3b0a1b
7af1b7b
257cd95
0ec00c4
a1c6149
5095a4b
998a43a
61e01f2
1188ab7
4e3dfcc
c67f5f3
87a6fa8
1d7e538
16a68d7
a72ccdf
fb914ac
746217c
b444006
5262709
51402d8
af3a33b
1b6a309
5cc0ee2
9a48e46
81feb98
5dbac00
fc934f9
48ed127
ebf703c
c4871e7
1b1a6d9
547de3b
0fb7db6
fd3ce82
db4fad4
38d6716
d2c94e2
f838db9
1487888
935f277
c6b9ada
9ad56bc
83ba96e
8e4ce7f
2e674dd
ab5e4dc
4e5bd60
85b4752
1bb9c97
54d14f0
c6dbf2c
efe2c8f
0cbb726
64d7326
7a379f6
3762fa3
bb767d5
21e8a2a
8858976
a028bdc
5064a9f
f63a05d
9d3dae4
4b9f96b
981d37d
8356eea
b95864b
8d0dc5d
e9d50f3
776d15d
b50d9ac
d01cdc5
fe4e248
a6e8b0d
ea6253f
37e1652
bd62d64
9bee794
5649546
17fdd8d
0a4b623
9c3d083
e7685c8
109c568
7232409
a3a0718
2c346cd
d1484fb
d5bfc6e
e73d3da
ee364e6
e3c1b36
5243c02
1a357a4
7ef9f26
df455fd
befac7b
45a65d3
beec985
cdf4d41
7a5e366
442948a
bd880a6
e3953fd
b2ade0c
65df05a
040de04
fa7301f
ac37094
6744388
ef4f4ac
2bb642f
d241d84
28a3bc8
065913b
5f6d96a
62edd81
0b9d545
2b4321c
d2d41a4
7e60ebf
39c4f2f
82090b0
0dd43ee
ee96dc4
398453c
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,10 @@ | ||
| # Copy this file to .env, then fill it in with credentials. | ||
| # For stages other than sandbox/dev E.g when requiring Connect Non-prod AWS userpool. | ||
| # Copy this file to .<stage>.env and fill it with stage specific values. | ||
|
|
||
| # cer-graphql variables | ||
| CONTENTFUL_ACCESS_TOKEN= | ||
| CONTENTFUL_SPACE_ID= | ||
| CONTENTFUL_ENVIRONMENT_ID= | ||
| COGNITO_REGION= | ||
| COGNITO_USER_POOL= |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,46 @@ | ||
| version: 2 | ||
| updates: | ||
| - package-ecosystem: 'npm' | ||
| directory: '/research-hub-web' | ||
| schedule: | ||
| interval: 'weekly' | ||
| open-pull-requests-limit: 1 | ||
| reviewers: | ||
| - Trombach | ||
| - cakr322 | ||
| - eric-el-tan | ||
| allow: | ||
| - dependency-type: 'direct' | ||
| - package-ecosystem: 'npm' | ||
| directory: '/cer-graphql' | ||
| schedule: | ||
| interval: 'weekly' | ||
| open-pull-requests-limit: 1 | ||
| reviewers: | ||
| - uoa-noel | ||
| - cakr322 | ||
| - eric-el-tan | ||
| allow: | ||
| - dependency-type: 'direct' | ||
| - package-ecosystem: 'npm' | ||
| directory: '/hub-search-proxy' | ||
| schedule: | ||
| interval: 'weekly' | ||
| open-pull-requests-limit: 1 | ||
| reviewers: | ||
| - Trombach | ||
| - cakr322 | ||
| - eric-el-tan | ||
| allow: | ||
| - dependency-type: 'direct' | ||
| - package-ecosystem: 'npm' | ||
| directory: '/subhub-link-checker' | ||
| schedule: | ||
| interval: 'weekly' | ||
| open-pull-requests-limit: 1 | ||
| reviewers: | ||
| - uoa-noel | ||
| - cakr322 | ||
| - eric-el-tan | ||
| allow: | ||
| - dependency-type: 'direct' |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,20 @@ | ||
| ## Description | ||
| <!--- Describe the feature or bug fix that this PR addresses --> | ||
| <!--- Feature: Attach wireframes or link to relevant design documentation if applicable --> | ||
| <!--- Bug fix: Describe the root cause and analysis of the problem --> | ||
|
|
||
| ## Solution | ||
| <!--- Feature: Describe your code changes, and mention if any existing features/functionality is affected by the changes. --> | ||
| <!--- Bug Fix: Describe your code changes, and explain the technical solution and how it fixes the issue --> | ||
|
|
||
| ## Screenshots | ||
| <!--- Add before and after screenshots of the UI if applicable --> | ||
|
|
||
| ## Testing | ||
| <!--- Describe unit or e2e tests if they were required for this feature/fix --> | ||
|
|
||
| ## Have the changes been checked in the following browsers? | ||
| - [x] Chrome | ||
| - [x] Safari | ||
| - [x] Firefox | ||
| - [x] Edge |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,36 @@ | ||
| name: Lint | ||
|
|
||
| on: | ||
| # Trigger the workflow on push or pull request, | ||
| # but only for the main branch | ||
| push: | ||
| branches: | ||
| - master | ||
| pull_request: | ||
| branches: | ||
| - master | ||
|
|
||
| jobs: | ||
| run-linters: | ||
| name: Run linters | ||
| runs-on: ubuntu-latest | ||
|
|
||
| steps: | ||
| - name: Check out Git repository | ||
| uses: actions/checkout@v2 | ||
|
|
||
| - name: Set up Node.js | ||
| uses: actions/setup-node@v1 | ||
| with: | ||
| node-version: 14 | ||
|
|
||
| - name: Install Node.js dependencies | ||
| working-directory: ./research-hub-web | ||
| run: npm ci | ||
|
|
||
| - name: Install Angular CLI | ||
| run: npm install -g @angular/cli | ||
|
|
||
| - name: ng lint | ||
| working-directory: ./research-hub-web | ||
| run: ng lint | ||
| Original file line number | Diff line number | Diff line change | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| @@ -0,0 +1,33 @@ | |||||||||||||||||||||||||||||
| name: Sentry Release | |||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||
| on: | |||||||||||||||||||||||||||||
| push: | |||||||||||||||||||||||||||||
| branches: | |||||||||||||||||||||||||||||
| - dev | |||||||||||||||||||||||||||||
| - test | |||||||||||||||||||||||||||||
| - prod | |||||||||||||||||||||||||||||
| paths: | |||||||||||||||||||||||||||||
| - 'research-hub-web/**' | |||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||
| jobs: | |||||||||||||||||||||||||||||
| sentry-release: | |||||||||||||||||||||||||||||
| name: Create Sentry Release | |||||||||||||||||||||||||||||
| runs-on: ubuntu-latest | |||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||
| steps: | |||||||||||||||||||||||||||||
| - name: Check out Git repository | |||||||||||||||||||||||||||||
| uses: actions/checkout@v2 | |||||||||||||||||||||||||||||
| - name: Get Branch | |||||||||||||||||||||||||||||
| id: var | |||||||||||||||||||||||||||||
| run: echo ::set-output name=branch::${GITHUB_REF#refs/*/} | |||||||||||||||||||||||||||||
| - name: Output Branch | |||||||||||||||||||||||||||||
| run: echo ${{ steps.var.outputs.branch }} | |||||||||||||||||||||||||||||
| - name: Notify Sentry | |||||||||||||||||||||||||||||
| # https://github.com/getsentry/action-release | |||||||||||||||||||||||||||||
| uses: getsentry/action-release@v1.1.6 | |||||||||||||||||||||||||||||
Check warningCode scanning / CodeQL Unpinned tag for a non-immutable Action in workflow Medium
Unpinned 3rd party Action 'Sentry Release' step
Uses Step Error loading related location Loading |
|||||||||||||||||||||||||||||
| env: | |||||||||||||||||||||||||||||
| SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }} | |||||||||||||||||||||||||||||
| SENTRY_ORG: university-of-auckland-7o | |||||||||||||||||||||||||||||
| SENTRY_PROJECT: research-hub | |||||||||||||||||||||||||||||
| with: | |||||||||||||||||||||||||||||
| environment: ${{ steps.var.outputs.branch }} | |||||||||||||||||||||||||||||
|
Comment on lines
+14
to
+33
Check warningCode scanning / CodeQL Workflow does not contain permissions Medium
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}
Copilot AutofixAI 9 days ago In general, the fix is to explicitly declare a The best minimal fix without changing functionality is to add a permissions:
contents: readNo imports or additional methods are needed; this is pure workflow configuration. The rest of the job steps remain unchanged.
Suggested changeset
1
.github/workflows/sentry.yml
Copilot is powered by AI and may make mistakes. Always verify output.
Refresh and try again.
|
|||||||||||||||||||||||||||||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,37 @@ | ||
| { | ||
| // Use IntelliSense to learn about possible attributes. | ||
| // Hover to view descriptions of existing attributes. | ||
| // For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387 | ||
| "version": "0.2.0", | ||
| "configurations": [ | ||
| { | ||
| "type": "pwa-chrome", | ||
| "request": "launch", | ||
| "name": "Launch Chrome against localhost", | ||
| "preLaunchTask": "research-hub-web - start", | ||
| "url": "http://localhost:4200", | ||
| "webRoot": "${workspaceFolder}/research-hub-web/" | ||
| }, | ||
| { | ||
| "name": "Attach to Firefox", | ||
| "type": "firefox", | ||
| "request": "attach", | ||
| "url": "http://localhost:4200/", | ||
| "webRoot": "${workspaceFolder}/research-hub-web/", | ||
| "preLaunchTask": "research-hub-web - start" | ||
| }, | ||
| { | ||
| "type": "pwa-chrome", | ||
| "request": "attach", | ||
| "name": "Attach to Karma", | ||
| "address": "localhost", | ||
| "port": 9222, | ||
| "timeout": 600000, | ||
| "sourceMaps": true, | ||
| "webRoot": "${workspaceFolder}/research-hub-web/", | ||
| "pathMapping": { | ||
| "/_karma_webpack_": "${workspaceFolder}/research-hub-web/" | ||
| } | ||
| } | ||
| ] | ||
| } |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,114 @@ | ||
| { | ||
| "version": "2.0.0", | ||
| "tasks": [ | ||
| { | ||
| "type": "npm", | ||
| "script": "start", | ||
| "path": "research-hub-web/", | ||
| "label": "research-hub-web - start", | ||
| "group": "build", | ||
| "dependsOrder": "sequence", | ||
| "dependsOn": ["research-hub-web - run GraphQL server"], | ||
| "presentation": { | ||
| "group": "web" | ||
| }, | ||
| "isBackground": true, | ||
| "problemMatcher": { | ||
| "owner": "custom", | ||
| "fileLocation": ["relative", "${workspaceFolder}"], | ||
| "pattern":[{ | ||
| // TODO Stub pattern, doesn't actually match problems. | ||
| // Added as it's required | ||
| "regexp": "^([^\\\\s].*)\\\\((\\\\d+,\\\\d+)\\\\):\\\\s*(.*)$", | ||
| "file": 1, | ||
| "location": 2, | ||
| "message": 3 | ||
| }], | ||
| "background": { | ||
| "activeOnStart": true, | ||
| "beginsPattern": "^.*Generating browser application bundles", | ||
| "endsPattern": "^.*Angular Live Development Server is listening on.*" | ||
| } | ||
| }, | ||
| }, | ||
| { | ||
| "type": "npm", | ||
| "script": "graphql-server-watch", | ||
| "path": "research-hub-web/", | ||
| "problemMatcher": { | ||
| "owner": "custom", | ||
| "fileLocation": ["relative", "${workspaceFolder}"], | ||
| "pattern":[{ | ||
| // TODO Stub pattern, doesn't actually match problems. | ||
| // Added as it's required | ||
| "regexp": "^([^\\\\s].*)\\\\((\\\\d+,\\\\d+)\\\\):\\\\s*(.*)$", | ||
| "file": 1, | ||
| "location": 2, | ||
| "message": 3 | ||
| }], | ||
| "background": { | ||
| "beginsPattern": "Loading remote schema...", | ||
| "endsPattern": "^.*Content API server ready.*$" | ||
| } | ||
| }, | ||
| "label": "research-hub-web - run GraphQL server", | ||
| "presentation": { | ||
| "group": "web" | ||
| }, | ||
| "isBackground": true | ||
| }, | ||
| { | ||
| "type": "npm", | ||
| "script": "generate-watch", | ||
| "path": "research-hub-web/", | ||
| "problemMatcher": { | ||
| "owner": "custom", | ||
| "fileLocation": ["relative", "${workspaceFolder}"], | ||
| "pattern":[{ | ||
| // TODO Stub pattern, doesn't actually match problems. | ||
| // Added as it's required | ||
| "regexp": "^([^\\\\s].*)\\\\((\\\\d+,\\\\d+)\\\\):\\\\s*(.*)$", | ||
| "file": 1, | ||
| "location": 2, | ||
| "message": 3 | ||
| }], | ||
| "background": { | ||
| "beginsPattern": "^.*Parse configuration", | ||
| "endsPattern": "^.*Watching for changes..." | ||
| } | ||
| }, | ||
| "label": "research-hub-web - generate GraphQL types", | ||
| "presentation": { | ||
| "group": "web" | ||
| }, | ||
| "isBackground": true | ||
| }, | ||
| { | ||
| "type": "npm", | ||
| "script": "test-watch", | ||
| "path": "research-hub-web/", | ||
| "problemMatcher": { | ||
| "owner": "custom", | ||
| "fileLocation": ["relative", "${workspaceFolder}"], | ||
| "pattern":[{ | ||
| // TODO Stub pattern, doesn't actually match problems. | ||
| // Added as it's required | ||
| "regexp": "^([^\\\\s].*)\\\\((\\\\d+,\\\\d+)\\\\):\\\\s*(.*)$", | ||
| "file": 1, | ||
| "location": 2, | ||
| "message": 3 | ||
| }], | ||
| "background": { | ||
| "beginsPattern": "^.*Generating browser application bundles", | ||
| "endsPattern": "^.*Coverage summary" | ||
| } | ||
| }, | ||
| "label": "research-hub-web - test", | ||
| "presentation": { | ||
| "group": "web" | ||
| }, | ||
| "isBackground": true | ||
| } | ||
|
|
||
| ] | ||
| } |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Copilot Autofix
AI 9 days ago
In general, this problem is fixed by explicitly defining a
permissions:block either at the workflow root (applies to all jobs) or at the specific job level, granting only the minimal permissions required. For a pure linting workflow that only checks out code and runs local commands,contents: readis sufficient and recommended.For this specific workflow in
.github/workflows/linting.yml, the simplest non-breaking fix is to add a root-levelpermissions:block after thename: Lintline. This will apply to therun-lintersjob without altering its logic. The block should restrict theGITHUB_TOKENto read-only repository contents, e.g.:No imports or additional methods are required, as this is purely a YAML configuration change inside the existing workflow file.