IntenseFinance/firefly-iii
3
0
Fork 0
mirror of https://github.com/firefly-iii/firefly-iii.git synced 2026-07-30 08:08:08 -05:00
Code Issues Packages Projects Releases Wiki Activity
16,358 Commits 9 Branches 1,105 Tags
07fe4400ed3ca25a2558f4d78b6c3cc57eab5975
Commit Graph
123 Commits
Author SHA1 Message Date
James Cole 83c6887ed0 Merge pull request #6085 from turrisxyz/Dependency-GitHub 2022-05-19 05:37:55 +02:00
naveen 9d1e20192d chore(deps): Included dependency review 
> Dependency Review GitHub Action in your repository to enforce dependency
> reviews on your pull requests.
> The action scans for vulnerable versions of dependencies introduced by package version
> changes in pull requests,
> and warns you about the associated security vulnerabilities.
> This gives you better visibility of what's changing in a pull request,
> and helps prevent vulnerabilities being added to your repository.

https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
 2022-05-19 00:12:46 +00:00
James Cole 27dd30785f Merge pull request #6032 from turrisxyz/neil/dependabot 2022-04-28 03:44:10 +00:00
neilnaveen 093794f7a5 chore: Included githubactions in the dependabot config 
This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.

Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot

GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot

https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
Signed-off-by: neilnaveen <42328488+neilnaveen@users.noreply.github.com>
 2022-04-27 21:24:04 +00:00
naveensrinivasan a963e1bc03 Set permissions for GitHub actions 
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

 Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
 2022-04-07 22:58:30 +00:00
James Cole 8c2455e8dd Update its_you_not_me.md 2022-03-31 04:21:50 +00:00
James Cole 55c82b2a0f Update support.md 2022-03-31 04:16:47 +00:00
James Cole efb7d4275d Update meta files for new release. 2022-02-28 06:40:34 +01:00
James Cole b4cd0d6bbc Update dependabot.yml 2022-01-25 06:03:12 +01:00
James Cole 212e9b833b Update its_you_not_me.md 2022-01-19 09:57:59 +01:00
James Cole ff5b872fa3 ci(Mergify): configuration update 
Signed-off-by: James Cole <james@firefly-iii.org>
 2022-01-13 13:58:08 +01:00
James Cole 5c4a482f64 Update bug.yml 2021-12-28 08:54:04 +01:00
James Cole 01f84ea11d Update its_you_not_me.md 2021-12-27 11:29:03 +01:00
James Cole c7e9d62712 It's you, not me. 2021-12-26 11:01:40 +01:00
James Cole 5918095f11 Update its_you_not_me.md 2021-12-26 11:01:03 +01:00
James Cole 24612eb634 Create its_you_not_me.md 2021-12-26 10:52:05 +01:00
James Cole 19461020ef Various layout fixes. 2021-12-19 06:56:11 +01:00
James Cole 775492b391 Minor fixes. 2021-12-03 18:39:45 +01:00
James Cole b1e453438e Update meta files for new release. 2021-11-26 06:28:04 +01:00
James Cole 284c6033d3 Update meta files for new release. 2021-11-26 06:24:10 +01:00
James Cole 35bc92bb49 Update meta files for new release. 2021-11-25 07:16:05 +01:00
James Cole c273f309d4 Add mergify 2021-11-22 06:34:03 +01:00
James Cole ba7ae19533 Update meta data for new release. 2021-11-12 20:07:09 +01:00
James Cole 4de2512b34 Remove old files. 2021-10-31 17:50:25 +01:00
James Cole 4352f4a095 Update templates. 2021-09-11 06:54:57 +02:00
James Cole b96a7bcbbd Update bug.yml 2021-09-04 07:25:46 +02:00
James Cole ec1764ba8c Update fr.yml 2021-08-23 06:24:47 +02:00
James Cole c16eb6f939 Add feature request 2021-08-17 17:16:17 +02:00
James Cole 901d4a2206 Switch templates. 2021-08-17 17:10:52 +02:00
James Cole 3b7bf5a1dd new support document. 2021-08-17 17:08:51 +02:00
James Cole c54dc1ad98 Fix readme in dev. 2021-08-10 18:05:40 +02:00
Flightkick b5a2531090 Add screenshots to Github repo 2021-07-23 11:58:30 +02:00
James Cole 2d294015f2 Update PR template 2021-07-03 12:34:47 +02:00
James Cole 3c8e6cfd31 Update dependabot.yml 2021-06-21 04:34:18 +00:00
James Cole b19f69dc2a Update lock.yml 2021-06-13 06:33:20 +00:00
James Cole 0d969dd42a Rebuild all for new release. 2021-05-08 21:26:50 +02:00
James Cole 8315734471 Update schedule to daily. 2021-05-03 08:08:47 +02:00
James Cole 1d9431795b Add feedback. 2021-05-02 15:12:53 +02:00
James Cole b3074b2f6a Fix run. 2021-05-02 15:03:56 +02:00
James Cole 3be65ff806 Add manual trigger. 2021-05-02 15:03:09 +02:00
James Cole 8c0005e460 Remove old lock file. 2021-05-02 15:00:56 +02:00
James Cole c7128dedf2 Lock app. 2021-05-02 15:00:40 +02:00
James Cole ed06ec9a58 Merge branch 'main' into develop 
# Conflicts:
#	.github/ISSUE_TEMPLATE/Custom.md
 2021-01-26 19:58:30 +01:00
James Cole fcea35ffa9 Update config.yml 2021-01-26 18:43:02 +00:00
James Cole 3c494a64f5 Create config.yml 2021-01-26 18:41:27 +00:00
James Cole e75d9ccd0e Update issue templates 2021-01-26 18:40:30 +00:00
James Cole 29e3eedef5 Merge some main changes into dev. 2020-12-12 06:53:26 +01:00
James Cole 81a3e23b4e Update contributing guidelines. 2020-12-05 14:52:55 +01:00
James Cole 6ecbc5e013 Create stale.yml 2020-11-29 13:03:13 +00:00
James Cole 5e703c6e7f Extra instructions in GitHub templates. 2020-11-19 06:31:09 +01:00