umputun / cronn
76%
master: 76%

LAST BUILD BRANCH: ci/workflow-hardening
DEFAULT BRANCH: master
Repo Added
Files 26
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH ci/workflow-hardening
branch: SELECT
CHANGE BRANCH
x

coverage: 75.596%. Remained the same
Relevant lines Covered
3692 RELEVANT LINES 2791 COVERED LINES
38.03 HITS PER LINE
Source Files on master

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
22924012340 ci/workflow-hardening revert redundant MaxBytesReader, use t.Context() in tests MaxBytesReader additions are redundant — rest.SizeLimit middleware already limits body size. Use t.Context() instead of context.Background() in test NewRequestWithContext calls. Pull #63 paskal github
75.6
22923913119 ci/workflow-hardening fix noctx: use NewRequestWithContext in all test files Pull #63 paskal github
75.6
22810695664 ci/workflow-hardening ci: add fetch-depth: 0 for goreleaser goreleaser needs full git history for changelog generation and tag resolution. See https://goreleaser.com/ci/actions/ Pull #63 paskal github
75.64
22807981507 ci/workflow-hardening ci: add fetch-depth: 0 for goreleaser goreleaser needs full git history for changelog generation and tag resolution. See https://goreleaser.com/ci/actions/ Pull #63 paskal github
75.64
22806886668 ci/workflow-hardening fix golangci-lint issues: add MaxBytesReader, use NewRequestWithContext - add http.MaxBytesReader (1MB limit) before FormValue/ParseForm calls in handlers to satisfy gosec G120 - replace httptest.NewRequest with httptest.NewRequestWithContext i... Pull #63 paskal github
75.64
22729449965 master Merge pull request #62 from umputun/fix/ci-security-hardening harden docker workflow against CI injection attacks push web-flow github
75.6
22596073776 fix/ci-security-hardening pass step outputs via env: in manifest push steps steps.ref.outputs.ref derived from head_branch was still interpolated via ${{ }} in run: blocks. Now passed via env: REF variable. Pull #62 paskal github
75.6
22595668286 fix/ci-security-hardening harden docker workflow against CI injection attacks - add permissions: contents: read, packages: write (least privilege) - add event == 'push' guard to prevent workflow_run firing on PR events - use env: mapping for head_branch instead of direct ... Pull #62 paskal github
75.6
22595722104 fix/ci-security-hardening harden docker workflow against CI injection attacks - add permissions: contents: read, packages: write (least privilege) - add event == 'push' guard to prevent workflow_run firing on PR events - use env: mapping for head_branch instead of direct ... Pull #62 paskal github
75.6
22125454012 master chore: exclude new gosec taint analysis rules in golangci config push umputun github
75.6
See All Builds (326)