Repository navigation
Feature/add branch protection - #113
Open
StevenKitavi wants to merge 122 commits into
Open
StevenKitavi wants to merge 122 commits into
StevenKitavi wants to merge 122 commits into
Conversation
Updated CodeQL workflow configuration for analysis.
--- updated-dependencies: - dependency-name: NuGet.Packaging dependency-version: 6.6.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
--- updated-dependencies: - dependency-name: System.Data.SqlClient dependency-version: 4.8.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
--- updated-dependencies: - dependency-name: System.Net.Http dependency-version: 4.3.4 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Added configuration for Dependabot to manage .NET SDK dependencies.
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Configure Dependabot for .NET SDK updates
…System.Data.SqlClient-4.8.6 Bump System.Data.SqlClient from 4.8.3 to 4.8.6
This workflow analyzes the supply chain security of the repository using Scorecard and uploads results to the code scanning dashboard.
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
…urity-remediation [StepSecurity] Apply security best practices
--- updated-dependencies: - dependency-name: Microsoft.EntityFrameworkCore.Sqlite dependency-version: 9.0.18 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
…/Microsoft.EntityFrameworkCore.Sqlite-9.0.18 Bump Microsoft.EntityFrameworkCore.Sqlite from 7.0.12 to 9.0.18
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4.3.0 to 8.0.1. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@d3f86a1...3e5f45b) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.20.1 to 2.21.0. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@b09bb98...05e3151) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.21.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
--- updated-dependencies: - dependency-name: Microsoft.Extensions.Identity.Core dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
…tions/attest-build-provenance-4.2.2 Bump actions/attest-build-provenance from 3.0.0 to 4.2.2
…/Microsoft.AspNetCore.Identity.UI-8.0.30 Bump Microsoft.AspNetCore.Identity.UI from 7.0.12 to 8.0.30
…tions/download-artifact-8.0.1 Bump actions/download-artifact from 4.3.0 to 8.0.1
…ensions.Identity.Core-10.0.11
…/Microsoft.Extensions.Identity.Core-10.0.11 Bump Microsoft.Extensions.Identity.Core from 10.0.10 to 10.0.11
…ep-security/harden-runner-2.21.0 Bump step-security/harden-runner from 2.20.1 to 2.21.0
…NuGet.Packaging-6.6.2 Bump NuGet.Packaging from 6.6.1 to 6.6.2
…tleaks/gitleaks-action-3.0.0 Bump gitleaks/gitleaks-action from 2.3.9 to 3.0.0
Potential fix for code scanning alert no. 9: Cross-site scripting
…System.Net.Http-4.3.4 Bump System.Net.Http from 4.3.0 to 4.3.4
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.7 to 4.37.9. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@ff2f1c6...cdf488f) --- updated-dependencies: - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
--- updated-dependencies: - dependency-name: Microsoft.Extensions.Identity.Core dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
--- updated-dependencies: - dependency-name: Microsoft.Extensions.Logging.Debug dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/attest-sbom](https://github.com/actions/attest-sbom) from 3.0.0 to 4.1.0. - [Release notes](https://github.com/actions/attest-sbom/releases) - [Changelog](https://github.com/actions/attest-sbom/blob/main/RELEASE.md) - [Commits](actions/attest-sbom@4651f80...c604332) --- updated-dependencies: - dependency-name: actions/attest-sbom dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.21.0 to 2.21.1. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@05e3151...e14015d) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.21.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
…ep-security/harden-runner-2.21.1 Bump step-security/harden-runner from 2.21.0 to 2.21.1
…tions/attest-sbom-4.1.0 Bump actions/attest-sbom from 3.0.0 to 4.1.0
…/Microsoft.Extensions.Logging.Debug-10.0.11 Bump Microsoft.Extensions.Logging.Debug from 7.0.0 to 10.0.11
…/Microsoft.Extensions.Identity.Core-10.0.11 Bump Microsoft.Extensions.Identity.Core from 10.0.10 to 10.0.11
…thub/codeql-action/upload-sarif-4.37.9 Bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.9
…/Microsoft.EntityFrameworkCore.Proxies-9.0.19 Bump Microsoft.EntityFrameworkCore.Proxies from 7.0.12 to 9.0.19
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Add Branch Protection as code