Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
44 changes: 22 additions & 22 deletions .github/workflows/main.yml
Original file line number Diff line number Diff line change
Expand Up @@ -25,12 +25,12 @@ jobs:
fail-fast: false
steps:
- name: Checkout
uses: actions/[email protected].0
uses: actions/[email protected].1
with:
fetch-depth: '0'

- name: Setup PHP, with composer and extensions
uses: shivammathur/[email protected].3
uses: shivammathur/[email protected].5
with:
php-version: '8.4'
tools: composer:v2
Expand All @@ -40,7 +40,7 @@ jobs:
run: echo "CACHE_DIR=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT

- name: Cache composer dependencies
uses: actions/cache@v4.2.4
uses: actions/cache@v4.3.0
with:
path: ${{ steps.composer-cache.outputs.CACHE_DIR }}
key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
Expand Down Expand Up @@ -70,12 +70,12 @@ jobs:
fail-fast: false
steps:
- name: Checkout
uses: actions/[email protected].0
uses: actions/[email protected].1
with:
fetch-depth: '0'

- name: Setup PHP, with composer and extensions
uses: shivammathur/[email protected].3
uses: shivammathur/[email protected].5
with:
php-version: '8.4'
tools: composer:v2
Expand All @@ -85,7 +85,7 @@ jobs:
run: echo "CACHE_DIR=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT

- name: Cache composer dependencies
uses: actions/cache@v4.2.4
uses: actions/cache@v4.3.0
with:
path: ${{ steps.composer-cache.outputs.CACHE_DIR }}
key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
Expand Down Expand Up @@ -125,12 +125,12 @@ jobs:
fail-fast: false
steps:
- name: Checkout
uses: actions/[email protected].0
uses: actions/[email protected].1
with:
fetch-depth: '0'

- name: Setup PHP, with composer and extensions
uses: shivammathur/[email protected].3
uses: shivammathur/[email protected].5
with:
php-version: '8.4'
tools: composer:v2
Expand All @@ -140,7 +140,7 @@ jobs:
run: echo "CACHE_DIR=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT

- name: Cache composer dependencies
uses: actions/cache@v4.2.4
uses: actions/cache@v4.3.0
with:
path: ${{ steps.composer-cache.outputs.CACHE_DIR }}
key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
Expand Down Expand Up @@ -185,13 +185,13 @@ jobs:
run: make phpinsights

- name: Archive Psalm results (psalm.json)
uses: actions/upload-artifact@v4.6.1
uses: actions/upload-artifact@v5
with:
name: psalm.json
path: ./build/psalm.json

- name: Archive `phploc` results (phploc.json)
uses: actions/upload-artifact@v4.6.1
uses: actions/upload-artifact@v5
with:
name: phploc.json
path: ./build/phploc.json
Expand All @@ -216,12 +216,12 @@ jobs:
fail-fast: false
steps:
- name: Checkout
uses: actions/[email protected].0
uses: actions/[email protected].1
with:
fetch-depth: '0'

- name: Setup PHP, with composer and extensions
uses: shivammathur/[email protected].3
uses: shivammathur/[email protected].5
with:
php-version: '8.4'
extensions: pdo_mysql, mysql
Expand All @@ -233,7 +233,7 @@ jobs:
run: echo "CACHE_DIR=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT

- name: Cache composer dependencies
uses: actions/cache@v4.2.4
uses: actions/cache@v4.3.0
with:
path: ${{ steps.composer-cache.outputs.CACHE_DIR }}
key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
Expand Down Expand Up @@ -288,7 +288,7 @@ jobs:
COVERALLS_RUN_LOCALLY: 1

- name: SonarQube Scan (https://sonarcloud.io/dashboard?id=github.com.tarlepp.symfony-flex-backend)
uses: SonarSource/sonarqube-scan-action@v5.3.0
uses: SonarSource/sonarqube-scan-action@v6.0.0
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} # https://github.com/SonarSource/sonarqube-scan-action?tab=readme-ov-file#environment-variables
Expand All @@ -297,25 +297,25 @@ jobs:
run: make phpmetrics

- name: Archive code coverage results (clover.xml)
uses: actions/upload-artifact@v4.6.1
uses: actions/upload-artifact@v5
with:
name: clover.xml
path: ./build/logs/clover.xml

- name: Archive code coverage results (junit.xml)
uses: actions/upload-artifact@v4.6.1
uses: actions/upload-artifact@v5
with:
name: junit.xml
path: ./build/logs/junit.xml

- name: Archive Code Coverage
uses: actions/upload-artifact@v4.6.1
uses: actions/upload-artifact@v5
with:
name: CodeCoverage
path: ./build/report

- name: Archive PhpMetrics results
uses: actions/upload-artifact@v4.6.1
uses: actions/upload-artifact@v5
with:
name: PhpMetrics
path: ./build/phpmetrics
Expand All @@ -326,7 +326,7 @@ jobs:

steps:
- name: Make checkout
uses: actions/[email protected].0
uses: actions/[email protected].1

- name: Lint `./README.md`
uses: avto-dev/[email protected]
Expand Down Expand Up @@ -359,7 +359,7 @@ jobs:
- test

steps:
- uses: actions/[email protected].0
- uses: actions/[email protected].1

- name: Set tag var
id: vars
Expand All @@ -369,7 +369,7 @@ jobs:
run: docker build . --file Dockerfile --tag symfony-flex-backend:${{ steps.vars.outputs.DOCKER_TAG }}

- name: Scan Docker image with Trivy vulnerability scanner
uses: aquasecurity/trivy-action@0.32.0
uses: aquasecurity/trivy-action@0.33.1
with:
image-ref: 'symfony-flex-backend:${{ steps.vars.outputs.DOCKER_TAG }}'
format: 'table'
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/scorecard.yml
Original file line number Diff line number Diff line change
Expand Up @@ -35,12 +35,12 @@ jobs:

steps:
- name: "Checkout code"
uses: actions/[email protected].0
uses: actions/[email protected].1
with:
persist-credentials: false

- name: "Run analysis"
uses: ossf/[email protected].2
uses: ossf/[email protected].3
with:
results_file: results.sarif
results_format: sarif
Expand All @@ -62,14 +62,14 @@ jobs:
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
# format to the repository Actions tab.
- name: "Upload artifact"
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v5
with:
name: SARIF file
path: results.sarif
retention-days: 5

# Upload the results to GitHub's code scanning dashboard.
- name: "Upload to code-scanning"
uses: github/codeql-action/upload-sarif@v3
uses: github/codeql-action/upload-sarif@v4
with:
sarif_file: results.sarif
4 changes: 2 additions & 2 deletions .github/workflows/vulnerability-scan.yml
Original file line number Diff line number Diff line change
Expand Up @@ -15,13 +15,13 @@ jobs:

steps:
- name: Checkout code
uses: actions/[email protected].0
uses: actions/[email protected].1

- name: Build the Docker image
run: docker build . --file Dockerfile --tag symfony-flex-backend:master

- name: Scan image with Trivy
uses: aquasecurity/trivy-action@0.28.0
uses: aquasecurity/trivy-action@0.33.1
with:
image-ref: symfony-flex-backend:master
ignore-unfixed: 'true'
Expand Down
Loading