From 06ada39e11b4560031a8fcffb33ea0e066096004 Mon Sep 17 00:00:00 2001 From: bundesbot Date: Tue, 18 Jan 2022 14:15:19 +0000 Subject: [PATCH 01/11] Generate newest code from openapi.yaml From e65c3779d8e81e99b7e507045570dc04ffbfe54a Mon Sep 17 00:00:00 2001 From: Jean-Luc Tibaux Date: Tue, 18 Jan 2022 14:35:32 +0000 Subject: [PATCH 02/11] add dependabot config to enable dependency scanning --- .github/dependabot.yml | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..fbe6fe3 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,8 @@ +version: 2 +updates: + + # Maintain dependencies for Python + - package-ecosystem: "pip" + directory: "/python-client" + schedule: + interval: "daily" From a07b53e7eddc8579862997c7ece61294d13f5046 Mon Sep 17 00:00:00 2001 From: Jean-Luc Tibaux Date: Tue, 18 Jan 2022 14:35:47 +0000 Subject: [PATCH 03/11] update sitemap for SEo --- sitemap.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sitemap.xml b/sitemap.xml index c85a5cd..9df1f3f 100644 --- a/sitemap.xml +++ b/sitemap.xml @@ -2,7 +2,7 @@ https://travelwarning.api.bund.dev/index.html - 2021-11-26 + 2022-01-18 monthly 1.0 From ade7e657b0e60b8200ba92a779cf7d92ece373b4 Mon Sep 17 00:00:00 2001 From: bundesbot Date: Tue, 18 Jan 2022 14:37:50 +0000 Subject: [PATCH 04/11] Generate newest code from openapi.yaml From 3b12f72463df4ae9f6726be333be708c3d39eb0c Mon Sep 17 00:00:00 2001 From: Jean-Luc Tibaux Date: Tue, 18 Jan 2022 14:41:44 +0000 Subject: [PATCH 05/11] added dependency scanning for github actions --- .github/dependabot.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index fbe6fe3..6863564 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -6,3 +6,9 @@ updates: directory: "/python-client" schedule: interval: "daily" + + # Maintain dependencies for GitHub Actions + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "daily" From 08a2b3b2a1a66d277c71c67439ca81bb3a5e510f Mon Sep 17 00:00:00 2001 From: Jean-Luc Tibaux Date: Tue, 18 Jan 2022 14:56:19 +0000 Subject: [PATCH 06/11] init codeql code scanning --- .github/workflows/codeql-scanning.yml | 59 +++++++++++++++++++++++++++ 1 file changed, 59 insertions(+) create mode 100644 .github/workflows/codeql-scanning.yml diff --git a/.github/workflows/codeql-scanning.yml b/.github/workflows/codeql-scanning.yml new file mode 100644 index 0000000..6e21855 --- /dev/null +++ b/.github/workflows/codeql-scanning.yml @@ -0,0 +1,59 @@ +name: "CodeQL" + +on: + push: + branches: [ main ] + pull_request: + # The branches below must be a subset of the branches above + branches: [ main ] + schedule: + - cron: '30 18 * * 3' + +jobs: + analyze: + name: Analyze + runs-on: ubuntu-latest + permissions: + actions: read + contents: read + security-events: write + + strategy: + fail-fast: false + matrix: + language: [ 'python' ] + # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ] + # Learn more about CodeQL language support at https://git.io/codeql-language-support + + steps: + - name: Checkout repository + uses: actions/checkout@v2 + + # Initializes the CodeQL tools for scanning. + - name: Initialize CodeQL + uses: github/codeql-action/init@v1 + with: + languages: ${{ matrix.language }} + # If you wish to specify custom queries, you can do so here or in a config file. + # By default, queries listed here will override any specified in a config file. + # Prefix the list here with "+" to use these queries and those in the config file. + # queries: ./path/to/local/query, your-org/your-repo/queries@main + + # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). + # If this step fails, then you should remove it and run the build manually (see below) + - name: Autobuild + uses: github/codeql-action/autobuild@v1 + + # ℹī¸ Command-line programs to run using the OS shell. + # 📚 https://git.io/JvXDl + + # ✏ī¸ If the Autobuild fails above, remove it and uncomment the following three lines + # and modify them (or add more) to build your code if your project + # uses a compiled language + + #- run: | + # make bootstrap + # make release + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v1 From de9274da03d10b854941d5c77276bb0e4333add0 Mon Sep 17 00:00:00 2001 From: Jean-Luc Tibaux Date: Tue, 18 Jan 2022 14:58:55 +0000 Subject: [PATCH 07/11] testing code scanning --- .github/workflows/codeql-scanning.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/codeql-scanning.yml b/.github/workflows/codeql-scanning.yml index 6e21855..ff8e499 100644 --- a/.github/workflows/codeql-scanning.yml +++ b/.github/workflows/codeql-scanning.yml @@ -9,6 +9,9 @@ on: schedule: - cron: '30 18 * * 3' + # added to manually test workflow from 'actions' tab + workflow_dispatch: + jobs: analyze: name: Analyze From 83e450e41c8e531c2abef8913904723af349564d Mon Sep 17 00:00:00 2001 From: bundesbot Date: Tue, 18 Jan 2022 15:01:25 +0000 Subject: [PATCH 08/11] Generate newest code from openapi.yaml From 9b56f8c068de0eb2fe4f09946820bfce028b9b41 Mon Sep 17 00:00:00 2001 From: Jean-Luc Tibaux Date: Tue, 18 Jan 2022 15:04:19 +0000 Subject: [PATCH 09/11] removed typo from codeql workflow file name --- .github/workflows/{codeql-scanning.yml => codeql-scanning.yaml} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename .github/workflows/{codeql-scanning.yml => codeql-scanning.yaml} (100%) diff --git a/.github/workflows/codeql-scanning.yml b/.github/workflows/codeql-scanning.yaml similarity index 100% rename from .github/workflows/codeql-scanning.yml rename to .github/workflows/codeql-scanning.yaml From 20e1e7b263caf7c83f00dde87aad5069ab01d083 Mon Sep 17 00:00:00 2001 From: Jean-Luc Tibaux Date: Tue, 18 Jan 2022 15:08:02 +0000 Subject: [PATCH 10/11] still bugfixing --- .github/workflows/codeql-scanning.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql-scanning.yaml b/.github/workflows/codeql-scanning.yaml index ff8e499..68edd7e 100644 --- a/.github/workflows/codeql-scanning.yaml +++ b/.github/workflows/codeql-scanning.yaml @@ -2,7 +2,7 @@ name: "CodeQL" on: push: - branches: [ main ] + branches: [ main, add-codeql-scanning ] pull_request: # The branches below must be a subset of the branches above branches: [ main ] From b10ef0a9b8c3b74e3f3454d30a46684737b98979 Mon Sep 17 00:00:00 2001 From: Jean-Luc Tibaux Date: Tue, 18 Jan 2022 15:14:10 +0000 Subject: [PATCH 11/11] completed codeql scanning implementation --- .github/workflows/codeql-scanning.yaml | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/.github/workflows/codeql-scanning.yaml b/.github/workflows/codeql-scanning.yaml index 68edd7e..35b2509 100644 --- a/.github/workflows/codeql-scanning.yaml +++ b/.github/workflows/codeql-scanning.yaml @@ -1,17 +1,14 @@ -name: "CodeQL" +name: "CodeQL code scanning" on: push: - branches: [ main, add-codeql-scanning ] + branches: [ main ] pull_request: # The branches below must be a subset of the branches above branches: [ main ] schedule: - cron: '30 18 * * 3' - # added to manually test workflow from 'actions' tab - workflow_dispatch: - jobs: analyze: name: Analyze