Commit graph

11 commits

Author SHA1 Message Date
Peter Frank
3d53351b8f
Update issue templates and automatic comment on new issues (#19357)
* Update issue templates

Adding a new issue template as part of an effort to clean up the way we use GitHub / GitHub Discussions

* Update config.yml

* Update issue.yml
2023-04-24 13:15:40 -07:00
Julianna Tetreault
8efdf51c02
Updates the Contributing Guide link in issue.yml (#17773) 2022-05-26 10:05:22 -06:00
Naveen
0a96b7f0ae
chore: Set permissions for GitHub actions (#17535)
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-05-03 10:54:51 -06:00
Takuya N
aec2349ea7
Use label bug instead of type: bug (#17159)
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
2022-04-07 13:12:03 +01:00
Julianna Tetreault
ced3933932
Updates the github-actions bot feature request link and team tag (#17044) 2022-03-29 08:38:58 -06:00
dependabot[bot]
0db3770959
Bump peter-evans/create-or-update-comment from 1.4.5 to 2 (#16969)
Bumps [peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment) from 1.4.5 to 2.
- [Release notes](https://github.com/peter-evans/create-or-update-comment/releases)
- [Commits](https://github.com/peter-evans/create-or-update-comment/compare/v1.4.5...v2)

---
updated-dependencies:
- dependency-name: peter-evans/create-or-update-comment
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-23 12:26:06 -06:00
dependabot[bot]
08720a69c4
Bump peter-evans/create-or-update-comment from 1 to 1.4.5 (#13740)
Bumps [peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment) from 1 to 1.4.5.
- [Release notes](https://github.com/peter-evans/create-or-update-comment/releases)
- [Commits](https://github.com/peter-evans/create-or-update-comment/compare/v1...v1.4.5)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-06-16 08:57:36 -06:00
Josh Puetz
9fe7be190b
Switch references to Forem master branch to main (#12325) 2021-04-16 11:51:06 -05:00
Christina
1f90c63eac
Update issue.yml text. (#12375)
* Update issue.yml text. 

Updating text to give more time for following up on issues and to let the community know why some feature requests may be closed.

* Update .github/workflows/issue.yml

Removing extremely

Co-authored-by: rhymes <rhymes@hey.com>

Co-authored-by: rhymes <rhymes@hey.com>
2021-01-22 10:02:24 -06:00
Joe Doss
c87951d4f2
Add create_buildkite_pr_build.sh (#11849)
* Remove rebase workflow as it will not work as expected with third party forks.

* Add the create_buildkite_pr_build.sh script.

This script will use the GitHub API to gather information about the PR, the PR
Author and create a Pull Request pipeline build on Buildkite.

You can mock out the things needed to work on this script locally with the
following environment variables exported:

export BUILDKITE_API_ACCESS_TOKEN=notarealtoken
export GITHUB_EVENT_PATH=$(curl --silent 2d0e0bdefc/github_actions_event_context.json)
export GITHUB_REPOSITORY=forem/forem
export GITHUB_TOKEN=notarealtoken

Note: You will need to get your own BUILDKITE_API_ACCESS_TOKEN and GITHUB_TOKEN
tokens.

You can then run the script locally to create builds from a pull request. The
GITHUB_EVENT_PATH JSON data is from https://github.com/forem/forem/pull/1181
which might not build on Buildkite down the road if is is closed. You might need
to pull down that JSON data and find and replace the PR number 11818 with thing
else.

Also this script could be busted out into it's own GitHub Action repo so you can
work on it outside of the Forem repo, but I don't have the mental fortitude to
work on GitHub Actions at this time. It is the most painful CI systems I have used
to date in terms of having an very very poor feedback loop/developer experience.
It desperately needs a REPL or mock shell for you to develop actions in so you don't
have to keep submitting PRs to your main branch to see results.
2020-12-11 09:41:02 -06:00
Alberto Pérez de Rada Fiol
8b882dd512
Add workflow automating maintainers' comment on new issues (#9488)
* Add workflow automating maintainers' comment on new issues

* Add steps

* Convert steps to a list
2020-07-29 14:17:47 +02:00