1
0
Fork 0
Commit Graph

6 Commits (6c6e81ee80361268e46a611720ab9416acdb9749)

Author SHA1 Message Date
naveen 14476ec2a6
chore: Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-06-22 08:18:22 +02:00
jrfnl dca2d49d0c
GH Actions: version update for various predefined actions
A number of predefined actions have had major release, which warrant an update to the workflow(s).

These updates don't actually contain any changed functionality, they are mostly just a change of the Node version used by the action itself (from Node 14 to Node 16).

Refs:
* https://github.com/actions/checkout/releases

P.S.: looks like there are some more actions in use which have had new major releases. As those actually _do_ contain changed functionality, I've excluded the others from this PR.
2022-03-15 12:49:38 +01:00
jrfnl 4324b375af GH Actions: ensure linting is done against highest/lowest supported PHP version
`latest` in the matrix will always refer to the latest stable PHP release, which would now be PHP 8.0.
2021-06-21 21:05:19 +02:00
jrfnl 617d63f40a GH Actions: set error reporting to E_ALL
Turns out the default setting for `error_reporting` used by the SetupPHP action is `error_reporting=E_ALL & ~E_DEPRECATED & ~E_STRICT` and `display_errors` is set to `Off`.

For the purposes of CI, I'd recommend running with `E_ALL` and `display_errors=On` to ensure **all** PHP notices are shown.
2021-06-21 21:03:38 +02:00
Jordi Boggiano eeaa099021
Stop ignoring build changes to trigger build, that was smart :D 2020-04-22 09:32:50 +02:00
Jordi Boggiano a849e2b244
Add linting, php8, release builds to github actions 2020-04-22 09:27:58 +02:00