Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Release v0.14.0 #218

Merged
merged 35 commits into from
Jan 7, 2025
Merged

Release v0.14.0 #218

merged 35 commits into from
Jan 7, 2025

Conversation

jtherrmann
Copy link
Contributor

@jtherrmann jtherrmann commented Jan 6, 2025

TODO:

AndrewPlayer3 and others added 30 commits December 12, 2024 14:41
Bumps [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.85.0 to 3.86.1.
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Changelog](https://github.com/trufflesecurity/trufflehog/blob/main/.goreleaser.yml)
- [Commits](trufflesecurity/trufflehog@v3.85.0...v3.86.1)

---
updated-dependencies:
- dependency-name: trufflesecurity/trufflehog
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Update Actions example versions to v0.13.2
…esecurity/trufflehog-3.86.1

Bump trufflesecurity/trufflehog from 3.85.0 to 3.86.1
Bumps [ASFHyP3/actions](https://github.com/asfhyp3/actions) from 0.12.0 to 0.13.2.
- [Release notes](https://github.com/asfhyp3/actions/releases)
- [Changelog](https://github.com/ASFHyP3/actions/blob/develop/CHANGELOG.md)
- [Commits](v0.12.0...v0.13.2)

---
updated-dependencies:
- dependency-name: ASFHyP3/actions
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
remove flake8, add mypy section to README
Add a Reusable `mypy` Action for Static Type Checking
@jtherrmann jtherrmann requested a review from a team January 6, 2025 21:03
@@ -11,4 +11,4 @@
- develop
jobs:
call-changelog-check-workflow:
uses: ASFHyP3/actions/.github/workflows/reusable-changelog-check.yml@v0.12.0
uses: ASFHyP3/actions/.github/workflows/reusable-changelog-check.yml@v0.13.2

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions Job or Workflow does not set permissions
@@ -12,4 +12,4 @@

jobs:
call-labeled-pr-check-workflow:
uses: ASFHyP3/actions/.github/workflows/reusable-labeled-pr-check.yml@v0.12.0
uses: ASFHyP3/actions/.github/workflows/reusable-labeled-pr-check.yml@v0.13.2

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions Job or Workflow does not set permissions
@@ -10,7 +10,7 @@
fetch-depth: 0

- name: Secret Scanning
uses: trufflesecurity/trufflehog@v3.85.0
uses: trufflesecurity/trufflehog@v3.86.1

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'reusable-secrets-analysis.yml' step
Uses Step
uses 'trufflesecurity/trufflehog' with ref 'v3.86.1', not a pinned commit hash
@@ -4,4 +4,4 @@

jobs:
call-secrets-analysis-workflow:
uses: ASFHyP3/actions/.github/workflows/reusable-secrets-analysis.yml@v0.12.0
uses: ASFHyP3/actions/.github/workflows/reusable-secrets-analysis.yml@v0.13.2

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions Job or Workflow does not set permissions
@jtherrmann jtherrmann added the minor Bump the minor version number of this project label Jan 6, 2025
@jtherrmann jtherrmann merged commit 262d69e into main Jan 7, 2025
7 of 8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
minor Bump the minor version number of this project
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants