-
Notifications
You must be signed in to change notification settings - Fork 4
D->M #274
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
D->M #274
Changes from all commits
87aa50e
a817c4e
38339ca
93ed134
edb9046
e4deab2
15cbb18
d71fc9a
a255f4a
44b189f
9bce46b
bbeedff
4daf4aa
71bab72
ea9a64a
1b375c1
1748f62
f469bb4
c8ca36b
b144d32
e92a3a2
9e882b1
dafd31d
0123ce4
4edd5b0
a373eac
76eda25
b3225c2
cf9c334
20459de
d7593d3
b895ec9
adf3aba
907cf22
00bf143
d0dc404
1a02422
16fb127
57b8493
eb48a7c
21e0449
9a2f604
3b1ff3b
2b84efe
0103fa2
90c9f6e
cbdfd3e
f0fca9e
e423ea2
b8933dc
3b279f3
8b59409
8706835
6ad9ec8
87e676d
e7a4f9d
a8e1652
40eda2b
32a8d40
077cc78
8bad2af
7768ca8
79e7ab5
c5b707d
3553db5
706e611
93410bf
6bdf92a
e2963dd
8f0edaa
6f1af73
277a70a
a39a4ab
e075f63
e4f0360
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,3 @@ | ||
| [coverage:report] | ||
| omit = | ||
| */test_* |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,52 @@ | ||
| name: "Code scanning - action" | ||
|
|
||
| on: | ||
| push: | ||
| pull_request: | ||
| schedule: | ||
| - cron: '0 19 * * 0' | ||
|
|
||
| jobs: | ||
| CodeQL-Build: | ||
|
|
||
| # CodeQL runs on ubuntu-latest and windows-latest | ||
| runs-on: ubuntu-latest | ||
|
|
||
| steps: | ||
| - name: Checkout repository | ||
| uses: actions/checkout@v4 | ||
| with: | ||
| # We must fetch at least the immediate parents so that if this is | ||
| # a pull request then we can checkout the head. | ||
| fetch-depth: 2 | ||
|
|
||
| # If this run was triggered by a pull request event, then checkout | ||
| # the head of the pull request instead of the merge commit. | ||
| - run: git checkout HEAD^2 | ||
| if: ${{ github.event_name == 'pull_request' }} | ||
|
|
||
| # Initializes the CodeQL tools for scanning. | ||
| - name: Initialize CodeQL | ||
| uses: github/codeql-action/init@v3 | ||
| # Override language selection by uncommenting this and choosing your languages | ||
| # with: | ||
| # languages: go, javascript, csharp, python, cpp, java | ||
|
|
||
| # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). | ||
| # If this step fails, then you should remove it and run the build manually (see below) | ||
| - name: Autobuild | ||
| uses: github/codeql-action/autobuild@v3 | ||
|
|
||
| # ℹ️ Command-line programs to run using the OS shell. | ||
| # 📚 https://git.io/JvXDl | ||
|
|
||
| # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines | ||
| # and modify them (or add more) to build your code if your project | ||
| # uses a compiled language | ||
|
|
||
| #- run: | | ||
| # make bootstrap | ||
| # make release | ||
|
|
||
| - name: Perform CodeQL Analysis | ||
| uses: github/codeql-action/analyze@v3 |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,23 @@ | ||
| version: 2 | ||
| updates: | ||
|
|
||
| # Docker | ||
| - package-ecosystem: docker | ||
| directory: "/" | ||
| schedule: | ||
| interval: "monthly" | ||
| open-pull-requests-limit: 25 | ||
|
|
||
| # Python | ||
| - package-ecosystem: "pip" # See documentation for possible values | ||
| directory: "/" # Location of package manifests | ||
| schedule: | ||
| interval: "monthly" | ||
| open-pull-requests-limit: 25 | ||
|
|
||
| # GitHub Actions | ||
| - package-ecosystem: "github-actions" | ||
| directory: ".github/workflows" | ||
| schedule: | ||
| interval: "monthly" | ||
| open-pull-requests-limit: 25 |
| Original file line number | Diff line number | Diff line change | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| @@ -0,0 +1,11 @@ | ||||||||||||||||||||||||||
| --- | ||||||||||||||||||||||||||
| name: Manual Build & Push | ||||||||||||||||||||||||||
| on: | ||||||||||||||||||||||||||
| workflow_dispatch: | ||||||||||||||||||||||||||
| jobs: | ||||||||||||||||||||||||||
| build-push: | ||||||||||||||||||||||||||
| uses: kbase/.github/.github/workflows/reusable_build-push.yml@main | ||||||||||||||||||||||||||
| with: | ||||||||||||||||||||||||||
| name: '${{ github.event.repository.name }}-develop' | ||||||||||||||||||||||||||
| tags: br-${{ github.ref_name }} | ||||||||||||||||||||||||||
| secrets: inherit | ||||||||||||||||||||||||||
|
Comment on lines
+7
to
+11
Check warningCode scanning / CodeQL Workflow does not contain permissions Medium
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}
Copilot AutofixAI about 2 months ago To fix this problem, we should add a
Suggested changeset
1
.github/workflows/manual-build.yml
Copilot is powered by AI and may make mistakes. Always verify output.
Positive FeedbackNegative Feedback
Refresh and try again.
|
||||||||||||||||||||||||||
| Original file line number | Diff line number | Diff line change | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| @@ -0,0 +1,43 @@ | ||||||||||||||||||||||||||
| --- | ||||||||||||||||||||||||||
| name: Pull Request Build, Tag, & Push | ||||||||||||||||||||||||||
| on: | ||||||||||||||||||||||||||
| pull_request: | ||||||||||||||||||||||||||
| branches: | ||||||||||||||||||||||||||
| - develop | ||||||||||||||||||||||||||
| - main | ||||||||||||||||||||||||||
| - master | ||||||||||||||||||||||||||
| types: | ||||||||||||||||||||||||||
| - opened | ||||||||||||||||||||||||||
| - reopened | ||||||||||||||||||||||||||
| - synchronize | ||||||||||||||||||||||||||
| - closed | ||||||||||||||||||||||||||
| jobs: | ||||||||||||||||||||||||||
| build-develop-open: | ||||||||||||||||||||||||||
| if: github.base_ref == 'develop' && github.event.pull_request.merged == false | ||||||||||||||||||||||||||
| uses: kbase/.github/.github/workflows/reusable_build.yml@main | ||||||||||||||||||||||||||
| secrets: inherit | ||||||||||||||||||||||||||
| build-develop-merge: | ||||||||||||||||||||||||||
|
Comment on lines
+16
to
+19
Check warningCode scanning / CodeQL Workflow does not contain permissions Medium
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}
Copilot AutofixAI about 2 months ago To fix the issue, add a permissions:
contents: readYou may wish to expand this as you confirm job-level requirements. The change needed is:
Suggested changeset
1
.github/workflows/pr_build.yml
Copilot is powered by AI and may make mistakes. Always verify output.
Positive FeedbackNegative Feedback
Refresh and try again.
|
||||||||||||||||||||||||||
| if: github.base_ref == 'develop' && github.event.pull_request.merged == true | ||||||||||||||||||||||||||
| uses: kbase/.github/.github/workflows/reusable_build-push.yml@main | ||||||||||||||||||||||||||
| with: | ||||||||||||||||||||||||||
| name: '${{ github.event.repository.name }}-develop' | ||||||||||||||||||||||||||
| tags: pr-${{ github.event.number }},latest | ||||||||||||||||||||||||||
| secrets: inherit | ||||||||||||||||||||||||||
| build-main-open: | ||||||||||||||||||||||||||
|
Comment on lines
+20
to
+26
Check warningCode scanning / CodeQL Workflow does not contain permissions Medium
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}
Copilot AutofixAI about 2 months ago To fix this problem, add an explicit permissions:
contents: readat the top after the Files/regions/lines to change:
What is needed:
Suggested changeset
1
.github/workflows/pr_build.yml
Copilot is powered by AI and may make mistakes. Always verify output.
Positive FeedbackNegative Feedback
Refresh and try again.
|
||||||||||||||||||||||||||
| if: (github.base_ref == 'main' || github.base_ref == 'master') && github.event.pull_request.merged == false | ||||||||||||||||||||||||||
| uses: kbase/.github/.github/workflows/reusable_build-push.yml@main | ||||||||||||||||||||||||||
| with: | ||||||||||||||||||||||||||
| name: '${{ github.event.repository.name }}' | ||||||||||||||||||||||||||
| tags: pr-${{ github.event.number }} | ||||||||||||||||||||||||||
| secrets: inherit | ||||||||||||||||||||||||||
| build-main-merge: | ||||||||||||||||||||||||||
|
Comment on lines
+27
to
+33
Check warningCode scanning / CodeQL Workflow does not contain permissions Medium
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}
Copilot AutofixAI about 2 months ago To fix this issue, add a Region to change:
No imports, definitions, or methods required; just add the YAML block.
Suggested changeset
1
.github/workflows/pr_build.yml
Copilot is powered by AI and may make mistakes. Always verify output.
Positive FeedbackNegative Feedback
Refresh and try again.
|
||||||||||||||||||||||||||
| if: (github.base_ref == 'main' || github.base_ref == 'master') && github.event.pull_request.merged == true | ||||||||||||||||||||||||||
| uses: kbase/.github/.github/workflows/reusable_build-push.yml@main | ||||||||||||||||||||||||||
| with: | ||||||||||||||||||||||||||
| name: '${{ github.event.repository.name }}' | ||||||||||||||||||||||||||
| tags: pr-${{ github.event.number }},latest-rc | ||||||||||||||||||||||||||
| secrets: inherit | ||||||||||||||||||||||||||
| trivy-scans: | ||||||||||||||||||||||||||
|
Comment on lines
+34
to
+40
Check warningCode scanning / CodeQL Workflow does not contain permissions Medium
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}
Copilot AutofixAI about 2 months ago To fix the problem, explicitly add a permissions:
contents: readThis ensures any job in the workflow or in a downstream called reusable workflow will not receive write access to the repository from the
Suggested changeset
1
.github/workflows/pr_build.yml
Copilot is powered by AI and may make mistakes. Always verify output.
Positive FeedbackNegative Feedback
Refresh and try again.
|
||||||||||||||||||||||||||
| if: (github.base_ref == 'develop' || github.base_ref == 'main' || github.base_ref == 'master' ) && github.event.pull_request.merged == false | ||||||||||||||||||||||||||
| uses: kbase/.github/.github/workflows/reusable_trivy-scans.yml@main | ||||||||||||||||||||||||||
| secrets: inherit | ||||||||||||||||||||||||||
|
Comment on lines
+41
to
+43
Check warningCode scanning / CodeQL Workflow does not contain permissions Medium
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}
Copilot AutofixAI about 2 months ago To fix this problem, a
Suggested changeset
1
.github/workflows/pr_build.yml
Copilot is powered by AI and may make mistakes. Always verify output.
Positive FeedbackNegative Feedback
Refresh and try again.
|
||||||||||||||||||||||||||
| Original file line number | Diff line number | Diff line change | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| @@ -0,0 +1,25 @@ | ||||||||||||||||||||||||||
| --- | ||||||||||||||||||||||||||
| name: Release - Build & Push Image | ||||||||||||||||||||||||||
| on: | ||||||||||||||||||||||||||
| release: | ||||||||||||||||||||||||||
| branches: | ||||||||||||||||||||||||||
| - main | ||||||||||||||||||||||||||
| - master | ||||||||||||||||||||||||||
| types: [ published ] | ||||||||||||||||||||||||||
| jobs: | ||||||||||||||||||||||||||
| check-source-branch: | ||||||||||||||||||||||||||
| uses: kbase/.github/.github/workflows/reusable_validate-branch.yml@main | ||||||||||||||||||||||||||
| with: | ||||||||||||||||||||||||||
| build_branch: '${{ github.event.release.target_commitish }}' | ||||||||||||||||||||||||||
| validate-release-tag: | ||||||||||||||||||||||||||
|
Comment on lines
+11
to
+14
Check warningCode scanning / CodeQL Workflow does not contain permissions Medium
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}
Copilot AutofixAI about 2 months ago To fix the problem, introduce a Steps:
No other code or dependency changes are needed.
Suggested changeset
1
.github/workflows/release-main.yml
Copilot is powered by AI and may make mistakes. Always verify output.
Positive FeedbackNegative Feedback
Refresh and try again.
|
||||||||||||||||||||||||||
| needs: check-source-branch | ||||||||||||||||||||||||||
| uses: kbase/.github/.github/workflows/reusable_validate-release-tag.yml@main | ||||||||||||||||||||||||||
| with: | ||||||||||||||||||||||||||
| release_tag: '${{ github.event.release.tag_name }}' | ||||||||||||||||||||||||||
| build-push: | ||||||||||||||||||||||||||
|
Comment on lines
+15
to
+19
Check warningCode scanning / CodeQL Workflow does not contain permissions Medium
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}
Copilot AutofixAI about 2 months ago To fix the problem, add an explicit As a minimal starting point, and unless further knowledge about the needs of the downstream reusable workflows is provided, supplying You need to:
Suggested changeset
1
.github/workflows/release-main.yml
Copilot is powered by AI and may make mistakes. Always verify output.
Positive FeedbackNegative Feedback
Refresh and try again.
|
||||||||||||||||||||||||||
| needs: validate-release-tag | ||||||||||||||||||||||||||
| uses: kbase/.github/.github/workflows/reusable_build-push.yml@main | ||||||||||||||||||||||||||
| with: | ||||||||||||||||||||||||||
| name: '${{ github.event.repository.name }}' | ||||||||||||||||||||||||||
| tags: '${{ github.event.release.tag_name }},latest' | ||||||||||||||||||||||||||
| secrets: inherit | ||||||||||||||||||||||||||
|
Comment on lines
+20
to
+25
Check warningCode scanning / CodeQL Workflow does not contain permissions Medium
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}
Copilot AutofixAI about 2 months ago To fix this issue, add a
Suggested changeset
1
.github/workflows/release-main.yml
Copilot is powered by AI and may make mistakes. Always verify output.
Positive FeedbackNegative Feedback
Refresh and try again.
|
||||||||||||||||||||||||||
This file was deleted.
| Original file line number | Diff line number | Diff line change | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| @@ -0,0 +1,60 @@ | |||||||||||||||||||||||||||||
| # This workflow will install Python dependencies, run tests and lint with a variety of Python versions | |||||||||||||||||||||||||||||
| # For more information see: https://help.github.com/actions/language-and-framework-guides/using-python-with-github-actions | |||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||
| name: Index Runner test | |||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||
| on: | |||||||||||||||||||||||||||||
| pull_request: | |||||||||||||||||||||||||||||
| types: | |||||||||||||||||||||||||||||
| - opened | |||||||||||||||||||||||||||||
| - reopened | |||||||||||||||||||||||||||||
| - synchronize | |||||||||||||||||||||||||||||
| - ready_for_review | |||||||||||||||||||||||||||||
| push: | |||||||||||||||||||||||||||||
| # run workflow when merging to main or develop | |||||||||||||||||||||||||||||
| branches: | |||||||||||||||||||||||||||||
| - main | |||||||||||||||||||||||||||||
| - master | |||||||||||||||||||||||||||||
| - develop | |||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||
| jobs: | |||||||||||||||||||||||||||||
| test: | |||||||||||||||||||||||||||||
| runs-on: ubuntu-latest | |||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||
| env: | |||||||||||||||||||||||||||||
| WORKSPACE_TOKEN: ${{ secrets.WORKSPACE_TOKEN }} | |||||||||||||||||||||||||||||
| RE_API_TOKEN: ${{ secrets.RE_API_TOKEN }} | |||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||
| steps: | |||||||||||||||||||||||||||||
| - name: Checkout | |||||||||||||||||||||||||||||
| uses: actions/checkout@v4 | |||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||
| - name: Set up Python | |||||||||||||||||||||||||||||
| uses: actions/setup-python@v5 | |||||||||||||||||||||||||||||
| with: | |||||||||||||||||||||||||||||
| python-version: 3.9.19 | |||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||
| - name: Pip installation | |||||||||||||||||||||||||||||
| run: python -m pip install --upgrade pip poetry | |||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||
| - name: Poetry installation | |||||||||||||||||||||||||||||
| run: poetry install | |||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||
| - name: Run unit tests | |||||||||||||||||||||||||||||
| run: scripts/run_unit_tests | |||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||
| - name: Run integration tests | |||||||||||||||||||||||||||||
| run: | | |||||||||||||||||||||||||||||
| echo "WORKSPACE_TOKEN=$WORKSPACE_TOKEN" > .env | |||||||||||||||||||||||||||||
| echo "RE_API_TOKEN=$RE_API_TOKEN" >> .env | |||||||||||||||||||||||||||||
| scripts/run_integration_tests | |||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||
| - name: Print Docker Compose logs | |||||||||||||||||||||||||||||
| if: failure() | |||||||||||||||||||||||||||||
| run: docker compose logs | |||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||
| - name: Upload coverage to Codecov | |||||||||||||||||||||||||||||
| uses: codecov/codecov-action@v5 | |||||||||||||||||||||||||||||
| with: | |||||||||||||||||||||||||||||
| token: ${{ secrets.CODECOV_TOKEN }} | |||||||||||||||||||||||||||||
| fail_ci_if_error: true | |||||||||||||||||||||||||||||
|
Comment on lines
+22
to
+60
Check warningCode scanning / CodeQL Workflow does not contain permissions Medium test
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}
Copilot AutofixAI about 2 months ago The recommended fix is to add a minimal permissions:
contents: readimmediately before the No changes to imports, definitions, or other configuration are required.
Suggested changeset
1
.github/workflows/test.yml
Copilot is powered by AI and may make mistakes. Always verify output.
Positive FeedbackNegative Feedback
Refresh and try again.
|
|||||||||||||||||||||||||||||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1 +1 @@ | ||
| 1.9.18 | ||
| 1.9.21 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Missing space in YAML syntax - should be 'workflow_dispatch:' with proper indentation.