Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ci: Add listen.dev to Github Actions #3059

Closed
wants to merge 10 commits into from
+11 −2
Closed

ci: Add listen.dev to Github Actions #3059

Changes from 4 commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
c191fa5
add listen.dev github actions file
jkan2 Oct 29, 2024
94e1ab1
Merge branch 'develop' into jkan2/test-lstn
jkan2 Nov 7, 2024
bc456ba
Merge branch 'develop' into jkan2/test-lstn
jkan2 Nov 8, 2024
931d777
add condition for forks and dependabot
jkan2 Nov 9, 2024
0889d1d
Merge branch 'develop' into jkan2/test-lstn
jkan2 Nov 15, 2024
7b72110
updated to add listen-dev workflow into the build process
jkan2 Nov 15, 2024
3f4f40b
bump lstn version
jkan2 Nov 15, 2024
d094afd
bump ubuntu version as this seems to be the version that works best w…
jkan2 Nov 15, 2024
b153b3d
Merge branch 'develop' into jkan2/test-lstn
jkan2 Nov 15, 2024
d9e722a
increase to 30 minutes for testing
jkan2 Nov 16, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 24 additions & 0 deletions .github/workflows/lstn.yml
View file
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's not clear what purpose this tool actually serves? From their website:

See and control every external connection your builds make to catch malicious behavior before it reaches production.

But this isn't integrated into any of the build/test workflows so you won't really see anything?

Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
name: listen.dev Vulnerability Check
on:
workflow_dispatch: {}
pull_request: {}
push:
branches:
- develop

jobs:
listen_dev:
runs-on: ubuntu-latest

if: |
github.actor != 'dependabot[bot]' &&
(github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'zeta-chain/node')
steps:
- name: Checkout repository
uses: actions/checkout@v4

- name: Run listen.dev Scan
uses: listendev/[email protected]
with:
jwt: ${{ secrets.LSTN_API_KEY }}
ci: only