Commit Graph
54 Commits
Author SHA1 Message Date
Petri TuomolaandAleksandar Vidakovic a9feedbdf0 Moving SonarCloud to GitHub Actions 2022-04-23 09:36:04 +02:00
naveensrinivasanandAleksandar Vidakovic e088e4d70d chore: Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-04-21 13:46:58 +02:00
Vic RomeroandAleksandar Vidakovic 4648a96a35 Configuring SonarQube using only the sonarqube.yml file
Configuring SonarQube using only the sonarqube.yml file

Configuring SonarQube using only the sonarqube.yml file

Configuring SonarQube using only the sonarqube.yml file

Configuring SonarQube using only the sonarqube.yml file

Configuring SonarQube using only the sonarqube.yml file

Configuring SonarQube using only the sonarqube.yml file

Configuring SonarQube using only the sonarqube.yml file

Changes have been done for making the GitHub actions flexible to push changes to the upstream Apache Fineract
2022-04-05 17:15:01 +02:00
Aleksandar VidakovicandAleksandar Vidakovic 17f521604d Fix transitive dependency issues introduced by Mock Server upgrade 2022-03-21 13:04:57 +01:00
Aleksandar VidakovicandAleksandar Vidakovic 99e8525729 FINERACT-1526: Upgrade dependencies 2022-03-11 16:55:30 +01:00
Renovate BotandPetri Tuomola 85937c5779 chore(deps): update actions/setup-java action to v3 2022-03-07 06:29:03 +08:00
fdd6227254 Minor: Name PostgreSQL instead of MariaDB in build-postgresql.yml (#2059)
Co-authored-by: Aleksandar Vidakovic <vidakovic@users.noreply.github.com>
2022-03-05 23:20:50 +01:00
dependabot[bot]andAleksandar Vidakovic af846fb397 Bump actions/stale from 3 to 5
Bumps [actions/stale](https://github.com/actions/stale) from 3 to 5.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/v3...v5)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-03-05 18:21:55 +01:00
Renovate BotandAleksandar Vidakovic bc54579657 chore(deps): update gradle/wrapper-validation-action commit hash to 859c332 2022-03-05 18:13:00 +01:00
dependabot[bot]andMichael Vorburger ⛑️ ede24fc1d7 Bump actions/checkout from 2 to 3
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-03-05 13:45:09 +01:00
Arnold GalovicsandAleksandar Vidakovic aa24599244 FINERACT-984-7: Explicit ordering fix for moving ResultSets 2022-02-23 20:55:13 +01:00
Arnold GalovicsandAleksandar Vidakovic 11b0a91aa7 FINERACT-984-7: Extend GitHub Action pipeline for PostgreSQL 2022-02-23 18:45:10 +01:00
Petri TuomolaandPetri Tuomola ab6323e474 Reordering actions in fineract.dev workflow 2022-01-06 06:37:11 +08:00
Petri TuomolaandGitHub 83c83e1dd7 Update fineract.dev.yaml 2022-01-05 07:20:37 +08:00
Petri TuomolaandGitHub 30eb068061 Reverting changes to fineract.dev deployment script 2022-01-05 07:16:46 +08:00
Petri TuomolaandPetri Tuomola 1398234c2c Reordering actions in fineract.dev workflow 2022-01-03 22:00:33 +08:00
Aleksandar VidakovicandPetri Tuomola c81fc7f0f4 Upgrade to JDK 17 2022-01-03 21:04:53 +08:00
Petri TuomolaandAleksandar Vidakovic 84598709d1 Fixing deployment to Fineract.dev 2022-01-03 05:01:18 +01:00
Aleksandar VidakovicandPetri Tuomola 907f932abe Simplify build for different auth strategies 2022-01-03 06:15:04 +08:00
Aleksandar VidakovicandPetri Tuomola 6e052e536b Replace command line Docker image build with Gradle Jib plugin 2022-01-02 14:15:34 +08:00
Petri TuomolaandAleksandar Vidakovic c74bfed1fe FINERACT-1012: Upgrading OAuth support to Spring Security 5.6 2021-12-28 03:08:27 +01:00
Victor RomeroandPetri Tuomola 03a8a9858d FINERACT-982 - Completely ditch use of Drizzle JDBC Driver after all 2021-12-24 12:23:56 +08:00
Petri TuomolaandMichael Vorburger ⛑️ 5dbde0f2ed Integration tests for twofactor 2021-12-12 09:37:34 +01:00
Petri TuomolaandPetri Tuomola fee3d73426 Fix test broken by PR1917 2021-11-06 10:13:25 +08:00
Petri TuomolaandPetri Tuomola 0d2f102c5a FINERACT-1428: Introduce GitHub Actions as CI 2021-11-05 13:14:26 +08:00
Petri TuomolaandPetri Tuomola b3bccc82a5 FINERACT-1428: Introduce GitHub Actions as CI 2021-11-05 12:24:57 +08:00
Petri TuomolaandGitHub 3a03dc6b5a Roll back build.yml
Needs to be tried out somehow first in a separate branch
2021-11-04 14:50:34 +08:00
Petri TuomolaandGitHub 4bcae92a3d FINERACT-1428: Introduce GitHub Actions as CI 2021-11-04 14:32:52 +08:00
Michael VorburgerandPetri Tuomola 60a4d71dd0 Fix CI/CD to https://www.fineract.dev which was broken
See https://github.com/vorburger/www.fineract.dev/issues/6
2021-09-11 22:47:27 +08:00
Michael VorburgerandPetri Tuomola f2b60a19f9 Revert "Disable broken fineract.dev.yaml "
This reverts commit 4522b71dfd.

See https://github.com/vorburger/www.fineract.dev/issues/6
2021-09-11 22:47:27 +08:00
Petri TuomolaandGitHub 4522b71dfd Disable broken fineract.dev.yaml
The workflow to push to fineract.dev.yaml has been broken for a few months, and sends a failure emails for each merge. Issue reported to @vorburger. Disabling this to reduce spam until Michael has had some spare time to check what's wrong. Once fixed, let's re-enable this great feature.
2021-09-10 06:21:26 +08:00
Petri TuomolaandGitHub ffae7d44ae Update fineract.dev.yaml 2021-08-11 10:15:33 +08:00
Petri TuomolaandGitHub d5debd0eda Fixing fineract.dev build 2021-08-11 10:13:36 +08:00
Petri TuomolaandGitHub cbb4253e8e Fixing broken workflow for fineract.dev 2021-08-11 10:10:28 +08:00
Petri TuomolaandGitHub 10231bf111 Fixing broken fineract.dev workflow
Setup-gcloud moved by google to a new repository
2021-08-11 09:45:48 +08:00
Petri TuomolaandGitHub 1adf01fbf0 Delete rebase.yml
Deleting rebase action for now, as this is not allowed in Apache owned repositories
2021-07-01 12:29:39 +08:00
Petri TuomolaandGitHub 51601e9049 Fixing automatic rebase 2021-06-30 11:19:30 +08:00
Michael Vorburger ⛑️andAwasum Yannick 4cda858851 chore: Switch GitHub rebase action checkout@master to @v2
Using a fixed version here is more stable (otherwise future changes in actions/checkout@v3 could theoretically break this for us), and in line with https://github.com/cirrus-actions/rebase/commit/51854755db80c104a3f4be4b617988933209b5a1, which I've stumbled upon from #1509. This is also consistent with our other GitHub actions.
2020-11-28 21:49:25 +01:00
Renovate BotandMichael Vorburger ⛑️ 34a044ac3b chore(deps): update cirrus-actions/rebase action to v1.4 2020-11-28 18:30:24 +01:00
Renovate BotandMichael Vorburger ⛑️ accf7cde83 chore(deps): update actions/stale action to v3 2020-11-01 11:32:11 +01:00
Michael VorburgerandYemdjih Kaze Nasser d4e8a7edd0 do not attempt to run Deploy to Fineract.dev GitHub Workflow on Forks [FINERACT-970] 2020-05-22 03:47:17 +01:00
Michael Vorburger 00aa71b0e1 rm .github/workflows/first-interaction.yml
because it's broken, see
https://github.com/actions/first-interaction/issues/10
2020-05-17 00:21:00 +02:00
Michael Vorburger a0e20588aa fix canceling previous ongoing jobs on Fineract.dev [FINERACT-970] 2020-05-17 00:19:11 +02:00
Michael Vorburger edcdcc34a2 cancel previous ongoing jobs on Fineract.dev when updating [FINERACT-970] 2020-05-17 00:08:07 +02:00
Michael Vorburger 711ea1d6cd gcloud components install beta to deploy to https://Fineract.dev [FINERACT-970] 2020-05-16 23:34:46 +02:00
Michael Vorburger 84dfb32c34 use --quiet to deploy to https://Fineract.dev [FINERACT-970] 2020-05-16 23:26:43 +02:00
Michael Vorburger 04d3ce673c automatically deploy to https://Fineract.dev [FINERACT-970] 2020-05-16 23:07:53 +02:00
Michael Vorburger 297e483742 fix invalid YAML syntax in (broken) GitHub Action 2020-05-12 20:54:27 +02:00
Michael Vorburger ⛑️andGitHub dec9d21f71 add First Interaction Greeting GitHub Action (#880) 2020-05-11 12:09:57 +01:00
Michael Vorburger 8743fc9743 fix (?) .github/workflows/rebase.yml (FINERACT-829) 2020-05-10 16:20:45 +02:00