1
0
Fork 0
Commit Graph

21 Commits (a8ab5070fb99396e4710baee286478ad697724c2)

Author SHA1 Message Date
naveen 14476ec2a6
chore: Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-06-22 08:18:22 +02:00
jrfnl dca2d49d0c
GH Actions: version update for various predefined actions
A number of predefined actions have had major release, which warrant an update to the workflow(s).

These updates don't actually contain any changed functionality, they are mostly just a change of the Node version used by the action itself (from Node 14 to Node 16).

Refs:
* https://github.com/actions/checkout/releases

P.S.: looks like there are some more actions in use which have had new major releases. As those actually _do_ contain changed functionality, I've excluded the others from this PR.
2022-03-15 12:49:38 +01:00
Jordi Boggiano e3d99cac59
Fix phpstan issues, update baseline and pin PHPStan version in 2.2 branch (#10474) 2022-01-21 12:48:16 +01:00
Jordi Boggiano 2d92e2119a
Add deprecations checks 2021-12-07 09:33:45 +01:00
Jordi Boggiano f509c41280
Upgrade PHPStan to 1.0 (#10253)
Co-authored-by: Martin Herndl <martin@herndl.org>
2021-11-14 20:42:24 +01:00
Viktor Szépe e89459d964
Separate CI steps (#10226) 2021-10-27 14:54:36 +02:00
Ondrej Mirtes 79093d664b Update PHPStan and remove ignore 2021-07-21 10:10:09 +02:00
Jordi Boggiano 4940009f83
Bump phpstan to level 3 (#9734)
Clean up PackageInterface/CompletePackageInterface, add missing methods, type things in solver as BasePackage, added CompleteAliasPackage, ..
2021-03-09 15:49:40 +01:00
Nicolas Grekas ba94445bb9 Ensure InstalledVersions reports info about all currently registered class loaders 2021-01-27 10:39:35 +01:00
Jordi Boggiano cfb3b85454
Update semver to latest 2020-11-12 12:59:48 +01:00
Jordi Boggiano c2317d59bb
Bump phpstan and deps 2020-09-11 11:56:16 +02:00
Jordi Boggiano 89c4cb8836
Bump phpstan and deps 2020-09-11 11:48:08 +02:00
Graham Campbell 99d4b802fb Bumped minimum phpstan versions 2020-08-18 10:23:26 +01:00
Graham Campbell f5c2bdb783 Use latest cache action 2020-08-18 10:23:09 +01:00
Markus Staab 2279b6fdad
phpstan natively sends github action formatted errors
no need to use cs2pr for now
2020-08-13 15:57:39 +02:00
Ayesh Karunaratne d906ff12c9
PHPStan fixes: `autoload_files`, and `ignoreErrors` (#8974)
* PHPStan: Remove autoload_files directive as it is not necessary anymore

* PHPStan: Add error exclusions for sapi_windows_set_ctrl_handler function

* PHPStan: Add error exclusions for ZipArchive::LIBZIP_VERSION

* PHPStan: Require phpstan ^0.12.26

* Ensure zip ext is available on gh actions

Co-authored-by: Jordi Boggiano <j.boggiano@seld.be>
2020-06-16 10:05:44 +02:00
Jordi Boggiano c9571f90b4
Run phpstan with regular output and then run again to cs2pr if there was an error, to keep usable output in CI logs 2020-06-04 16:11:02 +02:00
Markus Staab 3c1757575e
Annotate phpstan errors in pull requests
Utilizing https://github.com/staabm/annotate-pull-request-from-checkstyle
2020-04-30 09:44:22 +02:00
Jordi Boggiano c0b0149040
Try and fix phpstan 2020-04-22 10:33:36 +02:00
Jordi Boggiano e046523631
Fix phpstan workflow 2020-04-22 09:46:33 +02:00
Jordi Boggiano 1dd78c0163
Merge branch '1.10' 2020-04-22 09:44:42 +02:00