Upstream/bitwarden-server
1
0
Fork 0
mirror of https://github.com/bitwarden/server.git synced 2024-12-02 13:53:23 +01:00
Code Issues Projects Releases Wiki Activity
5,199 Commits 303 Branches 181 Tags 68 MiB
f79a4b7d32
Commit Graph

156 Commits

Author SHA1 Message Date
MtnBurrit0
f79a4b7d32
Update build.yml 2024-11-07 14:52:37 -07:00
MtnBurrit0
47bd15d96b
test github.head_ref 2024-11-07 14:39:33 -07:00
Matt Bishop
f7957f7053
Check run permissions for secrets usage (#4992) 2024-11-07 09:56:57 -05:00
Matt Bishop
e7bd31c009
Check for secrets on Docker builds (#4985) 2024-11-06 13:56:12 -05:00
renovate[bot]
2abd37d2d7
[deps] DevOps: Update gh minor (#4945) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-10-30 11:23:50 -04:00
MtnBurrit0
724f2ee5e5
Secure inputs (#4927) 2024-10-22 10:29:57 -06:00
Opeyemi
c809794642
[BRE-372] - Clean up document start (#4915) 2024-10-21 13:11:59 +01:00
AJ
1fb366d42b
Replace github.ref with GITHUB_REF in build.yml scripts (#4857) 
Data should be separated from code where possible to avoid injection (CWE-78).

* https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions#understanding-the-risk-of-script-injections
* https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/store-information-in-variables#default-environment-variables
 2024-10-17 11:50:31 -04:00
renovate[bot]
245e2e4d52
[deps] DevOps: Update gh minor (#4885) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-10-17 10:42:44 -04:00
renovate[bot]
8e62e9eb38
[deps] DevOps: Update anchore/scan-action action to v5 (#4892) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-10-17 10:42:26 -04:00
MtnBurrit0
96f58dc309
BRE-349: Call _update_ephemeral_tags workflow (#4850) 
* Kick off ephemeral environment updates

* Fix missing ,

* Switch to head_ref

* Update to `main`
 2024-10-10 09:49:04 -06:00
renovate[bot]
793ef3aab8
[deps] DevOps: Update gh minor (#4828) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-09-30 11:36:51 +02:00
renovate[bot]
3381bca608
[deps] DevOps: Update gh minor (#4780) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-09-24 11:31:57 -04:00
renovate[bot]
8891540972
[deps] DevOps: Update gh minor (#4723) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-09-04 09:44:19 -04:00
renovate[bot]
8ad74ce5b1
[deps] DevOps: Update gh minor (#4652) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-26 16:47:52 -04:00
renovate[bot]
6dec1c6e04
[deps] DevOps: Update GitHub Artifact Actions to v4 (#4664) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-26 16:47:35 -04:00
renovate[bot]
0753cc9172
[deps] DevOps: Update actions/github-script action to v7 (#4666) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-26 16:47:10 -04:00
renovate[bot]
ee8716859f
[deps] DevOps: Update actions/setup-dotnet action to v4 (#4667) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-26 16:46:30 -04:00
renovate[bot]
e677344d7e
[deps] DevOps: Update actions/setup-node action to v4 (#4668) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-26 16:46:11 -04:00
renovate[bot]
7c50e4f2be
[deps] DevOps: Update docker/build-push-action action to v6 (#4670) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-26 11:41:49 -04:00
Daniel García
1a584b4477
[PM-9361] Generate Swagger specs in CI for the SDK (#4428) 
Co-authored-by: Oscar Hinton <Hinton@users.noreply.github.com>
 2024-08-20 15:34:22 +02:00
renovate[bot]
eaa386f3da
[deps] DevOps: Update gh minor (#4585) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-13 13:33:53 -04:00
renovate[bot]
31412db1a9
[deps] DevOps: Update anchore/scan-action action to v4 (#4606) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-08 16:12:22 -04:00
renovate[bot]
45b99336da
[deps] DevOps: Update gh minor (#4539) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-07-22 17:10:28 -04:00
renovate[bot]
2b38c49ff6
[deps] DevOps: Update gh minor (#3368) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-07-10 15:47:20 -04:00
Opeyemi
9d7e1ccc41
update failure stpes (#3870) 2024-03-05 20:14:50 +00:00
Matt Bishop
faf84f9aa9
Use primary tag for container scans (#3838) 
* Use local path for container scans

* Use a primary tag
 2024-02-23 16:09:51 -05:00
Matt Bishop
96d0ae9cf7
Consolidated scanning (#3832) 
* Consolidated security scanning

* Add quality scan

* Version bumps

* Add container scanning

* Check out repo for container scan

* Build need and dependent outputs

* Incremental SAST

* Sonar fixes

* Underscore

* Inherit secrets

* Qualify Docker image name outputs

* Try a login

* Remove build modifications as this doesn't work with a matrix

* Move container scanning closer to tbe Docker steps for better management
 2024-02-23 13:47:23 -05:00
Matt Bishop
ae5d6071ca
Remove CLOC job (#3796) 2024-02-13 12:42:01 -05:00
Vince Grassia
26ee43b770
Update logic for Docker image tag (#3695) 2024-01-23 21:03:11 +00:00
Matt Bishop
c63db733e0
Workflow linting and test separation (#3684) 
* Workflow linting and test separation

* Name linting step

* Few more renames

* Database testing consolidation

* Few more renames and tweaks
 2024-01-23 13:24:52 -05:00
Matt Bishop
1f8e2385db
Wire up code coverage (#3618) 2023-12-27 10:36:20 -05:00
Opeyemi
3f1f6b576a
[DEVOPS-1657] - UPDATE: Adds k8s deploy trigger on main branch (#3597) 2023-12-19 17:05:02 +00:00
Joseph Flinn
c120b7e867
Point workflows to main (#3549) 
* Point workflows to main

* Merge in master. Update new version-bump workflow changes
 2023-12-12 20:08:12 +00:00
Michał Chęciński
a589af3588
[DEVOPS-1654] Tag Server images in master with git commit (#3516) 
* Add image name with SHA

* Test

* Remove testing

* Change name

* Change to short SHA

* Test

* Fix

* Remove testing

* Test

* Remove testing
 2023-12-07 09:42:35 -05:00
Vince Grassia
6aa763a854
Update 'master' to 'main' (#3427) 2023-11-08 13:08:15 -05:00
Vince Grassia
f29d3e79a5
Pin gh-actions hashes to master (#3419) 2023-11-07 13:16:12 -07:00
renovate[bot]
1c0c6cc879
Update bitwarden/gh-actions digest to c970b0f (#3332) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-18 12:22:12 -04:00
renovate[bot]
8c3ca2f1fa
Update bitwarden/gh-actions digest to f112580 (#3314) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-05 14:58:13 -04:00
renovate[bot]
464dac8f4d
Update bitwarden/gh-actions digest to fdcf1fc (#3230) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-09-26 10:30:28 -04:00
renovate[bot]
e3dc515062
Update actions/checkout action to v4.1.0 (#3293) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-09-25 08:34:54 -04:00
renovate[bot]
4100372401
Update actions/checkout action to v4 (#3257) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-09-18 10:47:07 -04:00
renovate[bot]
876274b39e
Update gh minor (#3077) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-09-18 10:39:38 -04:00
Joseph Flinn
6d078851dc
Devops 1539 optimize server build (#3237) 
* Switch server build back to only triggering the Unified and relying on Slack notifications to notify of a failure

* Run actionlint over workflow files

* pin actions/github-script hash
 2023-08-29 16:22:09 -06:00
Opeyemi
e0299043a2
UPDATE: dotnet setup run step and to use global version (#3182) 
* UPDATE: dotnet setup run step and to use global version

* TEST: make the build run

* Revert attachment base image to latest
 2023-08-14 16:40:27 +01:00
Opeyemi
9d4b98e787
FIX: add more dotnet setup (#3181) 
* UPDATE: move dotnet setup to run before checkout
 2023-08-11 14:54:40 +01:00
Matt Bishop
6785908e39
Explicitly install .NET SDK for linting (#3180) 2023-08-11 08:49:04 -04:00
MtnBurrit0
d5a0e97fea
Fix github.ref comparison in build.yml (#3177) 
+ Convert to case statement
+ Extend comment
 2023-08-10 14:49:39 -06:00
Opeyemi
0c76969506
[DEVOPS-1516] - Update server build workflow to push images to ACR (#3157) 
* Update server build workflow to push images to ACR

* UPDATE: Remove docker_repos matrix variable

* FIX: make docker push command one-liner

* UODATE: revert attachment image source

* UPDATE: add suggestion and update tags in docker build

* UPDATE: docker build tags

* UPDATE: master branch tag to latest

* ADD: push server image to dockerhub

* ADD: sugesstions

* ADD: ACR var name change and usages

* Minor updates

* Fix syntax error

* UPDATE: use ACR var for image name step

---------

Co-authored-by: Vince Grassia <593223+vgrassia@users.noreply.github.com>
 2023-08-10 18:41:56 +01:00
renovate[bot]
1a21eca481
Update bitwarden/gh-actions digest to f096207 (#3076) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-08-08 11:02:43 -06:00