Commit Graph
14 Commits
Author SHA1 Message Date
Aleksandar VidakovicandAleksandar Vidakovic 6aa668a5f5 FINERACT-1470-2: Build issues 2022-05-06 08:46:24 +02:00
Aleksandar VidakovicandAleksandar Vidakovic decedc52f8 FINERACT-1470-fix: Fix Sonar configuration 2022-05-04 15:33:56 +02:00
Aleksandar VidakovicandAleksandar Vidakovic 40eb547a5c FINERACT-1470: Fineract release plugin 2022-05-04 15:11:53 +02:00
Arnold GalovicsandArnold Gálovics b185937962 Sonar test 2022-05-02 14:32:20 +02:00
Petri TuomolaandAleksandar Vidakovic a9feedbdf0 Moving SonarCloud to GitHub Actions 2022-04-23 09:36:04 +02:00
naveensrinivasanandAleksandar Vidakovic e088e4d70d chore: Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-04-21 13:46:58 +02:00
Vic RomeroandAleksandar Vidakovic 4648a96a35 Configuring SonarQube using only the sonarqube.yml file
Configuring SonarQube using only the sonarqube.yml file

Configuring SonarQube using only the sonarqube.yml file

Configuring SonarQube using only the sonarqube.yml file

Configuring SonarQube using only the sonarqube.yml file

Configuring SonarQube using only the sonarqube.yml file

Configuring SonarQube using only the sonarqube.yml file

Configuring SonarQube using only the sonarqube.yml file

Changes have been done for making the GitHub actions flexible to push changes to the upstream Apache Fineract
2022-04-05 17:15:01 +02:00
Aleksandar VidakovicandAleksandar Vidakovic 17f521604d Fix transitive dependency issues introduced by Mock Server upgrade 2022-03-21 13:04:57 +01:00
Renovate BotandPetri Tuomola 85937c5779 chore(deps): update actions/setup-java action to v3 2022-03-07 06:29:03 +08:00
Renovate BotandAleksandar Vidakovic bc54579657 chore(deps): update gradle/wrapper-validation-action commit hash to 859c332 2022-03-05 18:13:00 +01:00
dependabot[bot]andMichael Vorburger ⛑️ ede24fc1d7 Bump actions/checkout from 2 to 3
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-03-05 13:45:09 +01:00
Aleksandar VidakovicandPetri Tuomola c81fc7f0f4 Upgrade to JDK 17 2022-01-03 21:04:53 +08:00
Petri TuomolaandPetri Tuomola 0d2f102c5a FINERACT-1428: Introduce GitHub Actions as CI 2021-11-05 13:14:26 +08:00
Petri TuomolaandPetri Tuomola b3bccc82a5 FINERACT-1428: Introduce GitHub Actions as CI 2021-11-05 12:24:57 +08:00