Skip to content

Commit f61f62f

Browse files
Raj-StepSecurityAbhinav Kumar
Raj-StepSecurity
and
Abhinav Kumar
committed
Release (#2)
* initial changes renovate json removed yarn build goes thorugh yarn build goes thorugh yarn build goes thorugh ran yarn package temp changes temp changes base sha and sha updated deleted test folder to make it work deleted test folder to make it work sha and base sha removed sha and base sha removed * file added to test/test3 * file added to test/test3 * test/test3 deleted * test.yml updated * file added to test/test3 * test/test3 deleted * test/test3 deleted * test/test3 deleted * test/test3 deleted * test/test3 deleted * test/test3 deleted * file name renamed * test rename -> test-rename * base sha and sha corrected for file renaminhg tests * Renamed test/test rename 2.txt -> test/test rename-2.txt * base sha and sha corrected for file renaminhg tests * Added deleted file * Removed test file * sha added to test * submodule added to be deleted for test cases * submodule deleted * commits updated for sub module deletion test case * submodule added back to test/demo * submodule deleted * commits updated for sub module deletion test case * test/demo/test/test.txt deleted * test/demo/test/test.txt added * sha added to include added file change * funding.yml added again * test added * temp changes * temp changes * sha added to run for submodule * Revert "temp changes" This reverts commit d1b35b0. Revert "temp changes" This reverts commit 0ac81c0. code beautified security.md reverted back * comments addressed and removed steps dependent on tj-actions in test * commit ids corrected * commit ids corrected * commit ids corrected * commit ids corrected * commit ids corrected * test case corrected * test case corrected * commit ids corrected * correcting commit id * test cases corrected * readme updated * author name corrected --------- Co-authored-by: Abhinav Kumar <[email protected]>
1 parent 4334499 commit f61f62f

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

61 files changed

+101955
-1
lines changed

‎.codacy.yml

+4
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
---
2+
exclude_paths:
3+
- "*.md"
4+
- "dist/**"

‎.eslintignore

+5
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
dist/
2+
lib/
3+
node_modules/
4+
jest.config.js
5+
coverage/

‎.eslintrc.json

+85
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,85 @@
1+
{
2+
"plugins": [
3+
"jest",
4+
"@typescript-eslint",
5+
"github"
6+
],
7+
"extends": [
8+
"plugin:github/recommended",
9+
"plugin:prettier/recommended"
10+
],
11+
"parser": "@typescript-eslint/parser",
12+
"parserOptions": {
13+
"ecmaVersion": 9,
14+
"sourceType": "module",
15+
"project": "./tsconfig.json"
16+
},
17+
"rules": {
18+
"i18n-text/no-en": "off",
19+
"eslint-comments/no-use": "off",
20+
"import/no-namespace": "off",
21+
"no-unused-vars": "off",
22+
"@typescript-eslint/no-unused-vars": "error",
23+
"@typescript-eslint/explicit-member-accessibility": [
24+
"error",
25+
{
26+
"accessibility": "no-public"
27+
}
28+
],
29+
"@typescript-eslint/no-require-imports": "error",
30+
"@typescript-eslint/array-type": "error",
31+
"@typescript-eslint/await-thenable": "error",
32+
"@typescript-eslint/ban-ts-comment": "off",
33+
"camelcase": "off",
34+
"@typescript-eslint/consistent-type-assertions": "error",
35+
"@typescript-eslint/explicit-function-return-type": [
36+
"error",
37+
{
38+
"allowExpressions": true
39+
}
40+
],
41+
"@typescript-eslint/func-call-spacing": [
42+
"error",
43+
"never"
44+
],
45+
"@typescript-eslint/no-array-constructor": "error",
46+
"@typescript-eslint/no-empty-interface": "error",
47+
"@typescript-eslint/no-explicit-any": "error",
48+
"@typescript-eslint/no-extraneous-class": "error",
49+
"@typescript-eslint/no-for-in-array": "error",
50+
"@typescript-eslint/no-inferrable-types": "error",
51+
"@typescript-eslint/no-misused-new": "error",
52+
"@typescript-eslint/no-namespace": "error",
53+
"@typescript-eslint/no-non-null-assertion": "warn",
54+
"@typescript-eslint/no-unnecessary-qualifier": "error",
55+
"@typescript-eslint/no-unnecessary-type-assertion": "error",
56+
"@typescript-eslint/no-useless-constructor": "error",
57+
"@typescript-eslint/no-var-requires": "error",
58+
"@typescript-eslint/prefer-for-of": "warn",
59+
"@typescript-eslint/prefer-function-type": "warn",
60+
"@typescript-eslint/prefer-includes": "error",
61+
"@typescript-eslint/prefer-string-starts-ends-with": "error",
62+
"@typescript-eslint/promise-function-async": "error",
63+
"@typescript-eslint/require-array-sort-compare": "error",
64+
"@typescript-eslint/restrict-plus-operands": "error",
65+
"no-shadow": "off",
66+
"@typescript-eslint/no-shadow": "error",
67+
"semi": "off",
68+
"filenames/match-regex": [
69+
"error",
70+
"^[a-zA-Z0-9\\-.]+$",
71+
true
72+
],
73+
"@typescript-eslint/semi": [
74+
"error",
75+
"never"
76+
],
77+
"@typescript-eslint/type-annotation-spacing": "error",
78+
"@typescript-eslint/unbound-method": "error"
79+
},
80+
"env": {
81+
"node": true,
82+
"es6": true,
83+
"jest/globals": true
84+
}
85+
}

‎.gitattributes

+1
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
dist/** -diff linguist-generated=true

‎.github/dependabot.yml

+24
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
version: 2
2+
updates:
3+
- package-ecosystem: npm
4+
directory: "/"
5+
schedule:
6+
interval: daily
7+
open-pull-requests-limit: 10
8+
versioning-strategy: widen
9+
labels:
10+
- "merge when passing"
11+
- package-ecosystem: github-actions
12+
directory: "/"
13+
schedule:
14+
interval: daily
15+
open-pull-requests-limit: 10
16+
labels:
17+
- "merge when passing"
18+
- package-ecosystem: gitsubmodule
19+
directory: /
20+
schedule:
21+
interval: daily
22+
open-pull-requests-limit: 10
23+
labels:
24+
- "merge when passing"

‎.github/workflows/actions_release.yml

+21
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
name: Release GitHub Actions
2+
3+
on:
4+
workflow_dispatch:
5+
inputs:
6+
tag:
7+
description: "Tag for the release"
8+
required: true
9+
10+
permissions:
11+
contents: read
12+
13+
jobs:
14+
release:
15+
permissions:
16+
actions: read
17+
id-token: write
18+
contents: write
19+
uses: step-security/reusable-workflows/.github/workflows/actions_release.yaml@v1
20+
with:
21+
tag: "${{ github.event.inputs.tag }}"

‎.github/workflows/codacy-analysis.yml

+56
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
# This workflow checks out code, performs a Codacy security scan
2+
# and integrates the results with the
3+
# GitHub Advanced Security code scanning feature. For more information on
4+
# the Codacy security scan action usage and parameters, see
5+
# https://github.com/codacy/codacy-analysis-cli-action.
6+
# For more information on Codacy Analysis CLI in general, see
7+
# https://github.com/codacy/codacy-analysis-cli.
8+
9+
name: Codacy Security Scan
10+
11+
on:
12+
push:
13+
branches: [ main ]
14+
pull_request:
15+
# The branches below must be a subset of the branches above
16+
branches: [ main ]
17+
schedule:
18+
- cron: '15 16 * * 2'
19+
20+
permissions:
21+
actions: read
22+
contents: read
23+
security-events: write
24+
25+
jobs:
26+
codacy-security-scan:
27+
name: Codacy Security Scan
28+
runs-on: ubuntu-latest
29+
steps:
30+
# Checkout the repository to the GitHub Actions runner
31+
- name: Checkout code
32+
uses: actions/checkout@v4
33+
34+
# Execute Codacy Analysis CLI and generate a SARIF output with the security issues identified during the analysis
35+
- name: Run Codacy Analysis CLI
36+
continue-on-error: true
37+
uses: codacy/[email protected]
38+
with:
39+
# Check https://github.com/codacy/codacy-analysis-cli#project-token to get your project token from your Codacy repository
40+
# You can also omit the token and run the tools that support default configurations
41+
project-token: ${{ secrets.CODACY_PROJECT_TOKEN }}
42+
verbose: true
43+
output: results.sarif
44+
format: sarif
45+
# Adjust severity of non-security issues
46+
gh-code-scanning-compat: true
47+
# Force 0 exit code to allow SARIF file generation
48+
# This will hand over control about PR rejection to the GitHub side
49+
max-allowed-issues: 2147483647
50+
51+
# Upload the SARIF file generated in the previous step
52+
- name: Upload SARIF results file
53+
continue-on-error: true
54+
uses: github/codeql-action/upload-sarif@v3
55+
with:
56+
sarif_file: results.sarif

‎.github/workflows/codeql.yml

+79
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,79 @@
1+
# For most projects, this workflow file will not need changing; you simply need
2+
# to commit it to your repository.
3+
#
4+
# You may wish to alter this file to override the set of languages analyzed,
5+
# or to provide custom queries or build logic.
6+
#
7+
# ******** NOTE ********
8+
# We have attempted to detect the languages in your repository. Please check
9+
# the `language` matrix defined below to confirm you have the correct set of
10+
# supported CodeQL languages.
11+
#
12+
name: "CodeQL"
13+
14+
on:
15+
push:
16+
branches: [ "main" ]
17+
pull_request:
18+
# The branches below must be a subset of the branches above
19+
branches: [ "main" ]
20+
schedule:
21+
- cron: '44 20 * * 0'
22+
23+
permissions:
24+
actions: read
25+
contents: read
26+
security-events: write
27+
28+
jobs:
29+
analyze:
30+
name: Analyze
31+
runs-on: ubuntu-latest
32+
permissions:
33+
actions: read
34+
contents: read
35+
security-events: write
36+
37+
strategy:
38+
fail-fast: false
39+
matrix:
40+
language: [ 'javascript' ]
41+
# CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
42+
# Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
43+
44+
steps:
45+
- name: Checkout repository
46+
uses: actions/checkout@v4
47+
48+
# Initializes the CodeQL tools for scanning.
49+
- name: Initialize CodeQL
50+
uses: github/codeql-action/init@v3
51+
with:
52+
languages: ${{ matrix.language }}
53+
# If you wish to specify custom queries, you can do so here or in a config file.
54+
# By default, queries listed here will override any specified in a config file.
55+
# Prefix the list here with "+" to use these queries and those in the config file.
56+
57+
# Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
58+
# queries: security-extended,security-and-quality
59+
60+
61+
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
62+
# If this step fails, then you should remove it and run the build manually (see below)
63+
- name: Autobuild
64+
uses: github/codeql-action/autobuild@v3
65+
66+
# ℹ️ Command-line programs to run using the OS shell.
67+
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
68+
69+
# If the Autobuild fails above, remove it and uncomment the following three lines.
70+
# modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
71+
72+
# - run: |
73+
# echo "Run, Build Application using script"
74+
# ./location_of_script_within_repo/buildscript.sh
75+
76+
- name: Perform CodeQL Analysis
77+
uses: github/codeql-action/analyze@v3
78+
with:
79+
category: "/language:${{matrix.language}}"

‎.github/workflows/greetings.yml

+18
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
name: Greetings
2+
3+
on: [pull_request_target, issues]
4+
5+
permissions:
6+
pull-requests: write
7+
issues: write
8+
9+
jobs:
10+
greeting:
11+
runs-on: ubuntu-latest
12+
steps:
13+
- uses: actions/first-interaction@v1
14+
continue-on-error: true
15+
with:
16+
repo-token: ${{ secrets.PAT_TOKEN }}
17+
issue-message: "Thanks for reporting this issue, don't forget to star this project if you haven't already to help us reach a wider audience."
18+
pr-message: "Thanks for implementing a fix, could you ensure that the test covers your changes if applicable."

0 commit comments

Comments
 (0)