-
Notifications
You must be signed in to change notification settings - Fork 0
Bump aws-sdk from 2.1087.0 to 2.1528.0 in /hub-search-proxy #448
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Changes from all commits
17f18a1
6837b6c
e2aa65d
71b6b9e
a4b7875
0627388
cc31dff
1d468df
0cc3aa5
4c60400
bc98231
7f7905e
39ef5aa
42a543d
6508af7
01a0e40
fa8734b
17c6645
6f8c141
0b0f74d
029f140
f6c8388
190d6e3
247adfd
635e37f
e14519e
d564a59
782c5e3
452f69f
e8ff9f9
cb211ee
bdebb83
c2f4662
4f7bbe8
30d955d
71c2500
4c0c45c
f3faa4d
d502a2c
c6af960
7e62b76
5c2664b
c829cc3
76ae67e
cb0d7ef
7ab8e7e
618761b
df34804
bc31e12
a93d2d3
9f5ef19
05a5591
adad505
8cdb531
922e6d4
0d6e811
5b91912
0be0e37
6d4a0ac
6353590
4838e16
6d510c4
9c80f5b
dde134a
32af252
5e9bdb6
8c0ca7a
7700172
f042bda
3db4927
03194ac
60e03d0
3cf9d40
804b42a
1794370
109f11c
4f6f66b
967be11
f086c38
58b7a6b
5df8c76
e3b0a1b
7af1b7b
257cd95
0ec00c4
a1c6149
5095a4b
998a43a
61e01f2
1188ab7
4e3dfcc
c67f5f3
87a6fa8
1d7e538
16a68d7
a72ccdf
fb914ac
746217c
b444006
5262709
51402d8
af3a33b
1b6a309
5cc0ee2
9a48e46
81feb98
5dbac00
fc934f9
48ed127
ebf703c
c4871e7
1b1a6d9
547de3b
0fb7db6
fd3ce82
db4fad4
38d6716
d2c94e2
f838db9
1487888
935f277
c6b9ada
9ad56bc
83ba96e
8e4ce7f
2e674dd
ab5e4dc
4e5bd60
85b4752
1bb9c97
54d14f0
c6dbf2c
efe2c8f
0cbb726
64d7326
7a379f6
3762fa3
bb767d5
21e8a2a
8858976
a028bdc
5064a9f
f63a05d
9d3dae4
4b9f96b
981d37d
8356eea
b95864b
8d0dc5d
e9d50f3
776d15d
b50d9ac
d01cdc5
fe4e248
a6e8b0d
ea6253f
37e1652
bd62d64
9bee794
5649546
17fdd8d
0a4b623
9c3d083
e7685c8
109c568
7232409
a3a0718
2c346cd
d1484fb
d5bfc6e
e73d3da
ee364e6
e3c1b36
5243c02
1a357a4
7ef9f26
df455fd
befac7b
45a65d3
beec985
cdf4d41
7a5e366
442948a
bd880a6
e3953fd
b2ade0c
65df05a
040de04
fa7301f
ac37094
6744388
ef4f4ac
2bb642f
d241d84
28a3bc8
065913b
5f6d96a
62edd81
0b9d545
2b4321c
d2d41a4
7e60ebf
39c4f2f
82090b0
0dd43ee
ee96dc4
26e822d
1cdc092
5f935b0
6cc290e
ffd651f
cb40f73
05d945a
7d34a67
bae3fcc
d2e60a8
a3fa774
8362555
fef1c40
fe76bad
660223b
17f8920
1292fa2
fffc2b5
e4fb73c
8e32a1b
f1ca6cd
f8a217f
1a23b79
31acef8
69286e3
171f95d
6af2a3b
52f7fd8
edc423f
7493289
0d5f28a
cc5d81a
f404729
a5f6514
2bf6a1b
7acfc9d
a304ebf
92cfde8
43a0d6f
8ae0107
135c92c
1aca47a
6dfced6
0f8932e
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,10 @@ | ||
| # Copy this file to .env, then fill it in with credentials. | ||
| # For stages other than sandbox/dev E.g when requiring Connect Non-prod AWS userpool. | ||
| # Copy this file to .<stage>.env and fill it with stage specific values. | ||
|
|
||
| # cer-graphql variables | ||
| CONTENTFUL_ACCESS_TOKEN= | ||
| CONTENTFUL_SPACE_ID= | ||
| CONTENTFUL_ENVIRONMENT_ID= | ||
| COGNITO_REGION= | ||
| COGNITO_USER_POOL= |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,46 @@ | ||
| version: 2 | ||
| updates: | ||
| - package-ecosystem: 'npm' | ||
| directory: '/research-hub-web' | ||
| schedule: | ||
| interval: 'weekly' | ||
| open-pull-requests-limit: 1 | ||
| reviewers: | ||
| - Trombach | ||
| - cakr322 | ||
| - eric-el-tan | ||
| allow: | ||
| - dependency-type: 'direct' | ||
| - package-ecosystem: 'npm' | ||
| directory: '/cer-graphql' | ||
| schedule: | ||
| interval: 'weekly' | ||
| open-pull-requests-limit: 1 | ||
| reviewers: | ||
| - uoa-noel | ||
| - cakr322 | ||
| - eric-el-tan | ||
| allow: | ||
| - dependency-type: 'direct' | ||
| - package-ecosystem: 'npm' | ||
| directory: '/hub-search-proxy' | ||
| schedule: | ||
| interval: 'weekly' | ||
| open-pull-requests-limit: 1 | ||
| reviewers: | ||
| - Trombach | ||
| - cakr322 | ||
| - eric-el-tan | ||
| allow: | ||
| - dependency-type: 'direct' | ||
| - package-ecosystem: 'npm' | ||
| directory: '/subhub-link-checker' | ||
| schedule: | ||
| interval: 'weekly' | ||
| open-pull-requests-limit: 1 | ||
| reviewers: | ||
| - uoa-noel | ||
| - cakr322 | ||
| - eric-el-tan | ||
| allow: | ||
| - dependency-type: 'direct' |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,20 @@ | ||
| ## Description | ||
| <!--- Describe the feature or bug fix that this PR addresses --> | ||
| <!--- Feature: Attach wireframes or link to relevant design documentation if applicable --> | ||
| <!--- Bug fix: Describe the root cause and analysis of the problem --> | ||
|
|
||
| ## Solution | ||
| <!--- Feature: Describe your code changes, and mention if any existing features/functionality is affected by the changes. --> | ||
| <!--- Bug Fix: Describe your code changes, and explain the technical solution and how it fixes the issue --> | ||
|
|
||
| ## Screenshots | ||
| <!--- Add before and after screenshots of the UI if applicable --> | ||
|
|
||
| ## Testing | ||
| <!--- Describe unit or e2e tests if they were required for this feature/fix --> | ||
|
|
||
| ## Have the changes been checked in the following browsers? | ||
| - [x] Chrome | ||
| - [x] Safari | ||
| - [x] Firefox | ||
| - [x] Edge |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,36 @@ | ||
| name: Lint | ||
|
|
||
| on: | ||
| # Trigger the workflow on push or pull request, | ||
| # but only for the main branch | ||
| push: | ||
| branches: | ||
| - master | ||
| pull_request: | ||
| branches: | ||
| - master | ||
|
|
||
| jobs: | ||
| run-linters: | ||
| name: Run linters | ||
| runs-on: ubuntu-latest | ||
|
|
||
| steps: | ||
| - name: Check out Git repository | ||
| uses: actions/checkout@v2 | ||
|
|
||
| - name: Set up Node.js | ||
| uses: actions/setup-node@v1 | ||
| with: | ||
| node-version: 18 | ||
|
|
||
| - name: Install Node.js dependencies | ||
| working-directory: ./research-hub-web | ||
| run: npm ci --force | ||
|
|
||
| - name: Install Angular CLI | ||
| run: npm install -g @angular/cli | ||
|
|
||
| - name: ng lint | ||
| working-directory: ./research-hub-web | ||
| run: ng lint | ||
| Original file line number | Diff line number | Diff line change | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| @@ -0,0 +1,33 @@ | |||||||||||||||||||||||
| name: Sentry Release | |||||||||||||||||||||||
|
|
|||||||||||||||||||||||
| on: | |||||||||||||||||||||||
| push: | |||||||||||||||||||||||
| branches: | |||||||||||||||||||||||
| - dev | |||||||||||||||||||||||
| - test | |||||||||||||||||||||||
| - prod | |||||||||||||||||||||||
| paths: | |||||||||||||||||||||||
| - 'research-hub-web/**' | |||||||||||||||||||||||
|
|
|||||||||||||||||||||||
| jobs: | |||||||||||||||||||||||
| sentry-release: | |||||||||||||||||||||||
| name: Create Sentry Release | |||||||||||||||||||||||
| runs-on: ubuntu-latest | |||||||||||||||||||||||
|
|
|||||||||||||||||||||||
| steps: | |||||||||||||||||||||||
| - name: Check out Git repository | |||||||||||||||||||||||
| uses: actions/checkout@v2 | |||||||||||||||||||||||
| - name: Get Branch | |||||||||||||||||||||||
| id: var | |||||||||||||||||||||||
| run: echo ::set-output name=branch::${GITHUB_REF#refs/*/} | |||||||||||||||||||||||
| - name: Output Branch | |||||||||||||||||||||||
| run: echo ${{ steps.var.outputs.branch }} | |||||||||||||||||||||||
| - name: Notify Sentry | |||||||||||||||||||||||
| # https://github.com/getsentry/action-release | |||||||||||||||||||||||
| uses: getsentry/action-release@v1.1.6 | |||||||||||||||||||||||
Check warningCode scanning / CodeQL Unpinned tag for a non-immutable Action in workflow Medium
Unpinned 3rd party Action 'Sentry Release' step
Uses Step Error loading related location Loading |
|||||||||||||||||||||||
| env: | |||||||||||||||||||||||
| SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }} | |||||||||||||||||||||||
| SENTRY_ORG: university-of-auckland-7o | |||||||||||||||||||||||
| SENTRY_PROJECT: research-hub | |||||||||||||||||||||||
| with: | |||||||||||||||||||||||
| environment: ${{ steps.var.outputs.branch }} | |||||||||||||||||||||||
|
Comment on lines
+14
to
+33
Check warningCode scanning / CodeQL Workflow does not contain permissions Medium
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}
Copilot AutofixAI 9 days ago In general, the fix is to add an explicit The single best fix without changing existing functionality is to add a permissions:
contents: readafter line 1 (
Suggested changeset
1
.github/workflows/sentry.yml
Copilot is powered by AI and may make mistakes. Always verify output.
Refresh and try again.
|
|||||||||||||||||||||||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,37 @@ | ||
| { | ||
| // Use IntelliSense to learn about possible attributes. | ||
| // Hover to view descriptions of existing attributes. | ||
| // For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387 | ||
| "version": "0.2.0", | ||
| "configurations": [ | ||
| { | ||
| "type": "pwa-chrome", | ||
| "request": "launch", | ||
| "name": "Launch Chrome against localhost", | ||
| "preLaunchTask": "research-hub-web - start", | ||
| "url": "http://localhost:4200", | ||
| "webRoot": "${workspaceFolder}/research-hub-web/" | ||
| }, | ||
| { | ||
| "name": "Attach to Firefox", | ||
| "type": "firefox", | ||
| "request": "attach", | ||
| "url": "http://localhost:4200/", | ||
| "webRoot": "${workspaceFolder}/research-hub-web/", | ||
| "preLaunchTask": "research-hub-web - start" | ||
| }, | ||
| { | ||
| "type": "pwa-chrome", | ||
| "request": "attach", | ||
| "name": "Attach to Karma", | ||
| "address": "localhost", | ||
| "port": 9222, | ||
| "timeout": 600000, | ||
| "sourceMaps": true, | ||
| "webRoot": "${workspaceFolder}/research-hub-web/", | ||
| "pathMapping": { | ||
| "/_karma_webpack_": "${workspaceFolder}/research-hub-web/" | ||
| } | ||
| } | ||
| ] | ||
| } |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,114 @@ | ||
| { | ||
| "version": "2.0.0", | ||
| "tasks": [ | ||
| { | ||
| "type": "npm", | ||
| "script": "start", | ||
| "path": "research-hub-web/", | ||
| "label": "research-hub-web - start", | ||
| "group": "build", | ||
| "dependsOrder": "sequence", | ||
| "dependsOn": ["research-hub-web - run GraphQL server"], | ||
| "presentation": { | ||
| "group": "web" | ||
| }, | ||
| "isBackground": true, | ||
| "problemMatcher": { | ||
| "owner": "custom", | ||
| "fileLocation": ["relative", "${workspaceFolder}"], | ||
| "pattern":[{ | ||
| // TODO Stub pattern, doesn't actually match problems. | ||
| // Added as it's required | ||
| "regexp": "^([^\\\\s].*)\\\\((\\\\d+,\\\\d+)\\\\):\\\\s*(.*)$", | ||
| "file": 1, | ||
| "location": 2, | ||
| "message": 3 | ||
| }], | ||
| "background": { | ||
| "activeOnStart": true, | ||
| "beginsPattern": "^.*Generating browser application bundles", | ||
| "endsPattern": "^.*Angular Live Development Server is listening on.*" | ||
| } | ||
| }, | ||
| }, | ||
| { | ||
| "type": "npm", | ||
| "script": "graphql-server-watch", | ||
| "path": "research-hub-web/", | ||
| "problemMatcher": { | ||
| "owner": "custom", | ||
| "fileLocation": ["relative", "${workspaceFolder}"], | ||
| "pattern":[{ | ||
| // TODO Stub pattern, doesn't actually match problems. | ||
| // Added as it's required | ||
| "regexp": "^([^\\\\s].*)\\\\((\\\\d+,\\\\d+)\\\\):\\\\s*(.*)$", | ||
| "file": 1, | ||
| "location": 2, | ||
| "message": 3 | ||
| }], | ||
| "background": { | ||
| "beginsPattern": "Loading remote schema...", | ||
| "endsPattern": "^.*Content API server ready.*$" | ||
| } | ||
| }, | ||
| "label": "research-hub-web - run GraphQL server", | ||
| "presentation": { | ||
| "group": "web" | ||
| }, | ||
| "isBackground": true | ||
| }, | ||
| { | ||
| "type": "npm", | ||
| "script": "generate-watch", | ||
| "path": "research-hub-web/", | ||
| "problemMatcher": { | ||
| "owner": "custom", | ||
| "fileLocation": ["relative", "${workspaceFolder}"], | ||
| "pattern":[{ | ||
| // TODO Stub pattern, doesn't actually match problems. | ||
| // Added as it's required | ||
| "regexp": "^([^\\\\s].*)\\\\((\\\\d+,\\\\d+)\\\\):\\\\s*(.*)$", | ||
| "file": 1, | ||
| "location": 2, | ||
| "message": 3 | ||
| }], | ||
| "background": { | ||
| "beginsPattern": "^.*Parse configuration", | ||
| "endsPattern": "^.*Watching for changes..." | ||
| } | ||
| }, | ||
| "label": "research-hub-web - generate GraphQL types", | ||
| "presentation": { | ||
| "group": "web" | ||
| }, | ||
| "isBackground": true | ||
| }, | ||
| { | ||
| "type": "npm", | ||
| "script": "test-watch", | ||
| "path": "research-hub-web/", | ||
| "problemMatcher": { | ||
| "owner": "custom", | ||
| "fileLocation": ["relative", "${workspaceFolder}"], | ||
| "pattern":[{ | ||
| // TODO Stub pattern, doesn't actually match problems. | ||
| // Added as it's required | ||
| "regexp": "^([^\\\\s].*)\\\\((\\\\d+,\\\\d+)\\\\):\\\\s*(.*)$", | ||
| "file": 1, | ||
| "location": 2, | ||
| "message": 3 | ||
| }], | ||
| "background": { | ||
| "beginsPattern": "^.*Generating browser application bundles", | ||
| "endsPattern": "^.*Coverage summary" | ||
| } | ||
| }, | ||
| "label": "research-hub-web - test", | ||
| "presentation": { | ||
| "group": "web" | ||
| }, | ||
| "isBackground": true | ||
| } | ||
|
|
||
| ] | ||
| } |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Copilot Autofix
AI 9 days ago
In general, the fix is to explicitly set a
permissionsblock that grants only the minimal scopes required for this linting job. Since the job only checks out code and installs/runs Node-based tools, it only needs read access to repository contents.The best minimally invasive fix is to add a
permissionsblock at the workflow root (top level, alongsidenameandon) so that it applies to all jobs. This avoids touching the job structure or steps and documents that the workflow only needs read access. Concretely, in.github/workflows/linting.yml, insert:between the existing
name: Lintandon:keys. No imports or other changes are needed, and existing functionality is unchanged because all current operations are compatible with read-only contents access.