MtnBurrit0
f753829559
Always update the ephemeral environment when the label is added ( #5240 )
2025-01-09 10:50:03 -07:00
Vince Grassia
28d5535010
Update checkout action for cherry pick job ( #5242 )
2025-01-09 18:33:52 +01:00
MtnBurrit0
bd657c76cf
Remove unused workflow now that config has been migrated. ( #5239 )
2025-01-09 17:10:49 +00:00
renovate[bot]
f265911526
[deps] BRE: Update gh minor ( #5016 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-09 10:09:55 +01:00
Patrick-Pimentel-Bitwarden
cc96e35072
Auth/pm 2996/add auth request data to devices response model ( #5152 )
...
fix(auth): [PM-2996] Add Pending Auth Request Data to Devices Response
- New stored procedure to fetch the appropriate data.
- Updated devices controller to respond with the new data.
- Tests written at the controller and repository level.
Resolves PM-2996
2025-01-07 15:52:53 -05:00
Addison Beck
cd7c4bf6ce
chore: move Installation and Push to platform's domain folders ( #5085 )
...
* chore: set up a `CODEOWNERS` space for platform
* chore: move sql objects for `Installation` to platform's domain
* chore: move `Installation` and `PushRelay` code to platform's domain
2025-01-06 18:10:53 +01:00
renovate[bot]
066cd4655d
[deps] BRE: Update codecov/codecov-action action to v5 ( #5071 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-03 17:33:57 -05:00
renovate[bot]
4b2030de77
[deps] BRE: Update anchore/scan-action action to v6 ( #5180 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-03 11:35:28 -05:00
MtnBurrit0
840ff00189
BRE-292: Sync ephemeral environment with GH workflow ( #5174 )
...
* Add sync_environment call
* Put callable workflow in it's own job
* Switch to context for GitHub input
* Set requirements and inherit secrets
* Add the condition to the job
* Update .github/workflows/build.yml
Co-authored-by: Vince Grassia <593223+vgrassia@users.noreply.github.com>
---------
Co-authored-by: Vince Grassia <593223+vgrassia@users.noreply.github.com>
2025-01-02 13:58:32 -07:00
Vince Grassia
144c0a2fee
Add missing curly brace ( #5203 )
2024-12-31 10:49:52 -08:00
Daniel James Smith
11325c4d3f
Renovate: Assign DbOps to Microsoft.Extensions.Caching.Cosmos ( #5171 )
...
Co-authored-by: Daniel James Smith <djsmith85@users.noreply.github.com>
2024-12-20 09:17:38 -05:00
Michał Chęciński
16488091d2
Remove is_workflow_call input from build workflow ( #5161 )
2024-12-17 10:45:02 -05:00
Daniel James Smith
d88a103fbc
Move CSVHelper under billing ownership ( #5156 )
...
Co-authored-by: Daniel James Smith <djsmith85@users.noreply.github.com>
2024-12-16 11:11:37 -05:00
Opeyemi
d0c72a34f1
Update SH Unified Build trigger ( #5154 )
...
* Update SH Unified Build trigger
* make value a boolean
2024-12-16 15:21:05 +01:00
Matt Bishop
c0a9c55891
Fix image path formation for Cosign ( #5151 )
2024-12-13 10:26:45 -05:00
Matt Bishop
11bdb93d1e
Sign main branch container builds with cosign ( #5148 )
...
* Sign main branch container builds with cosign
* Properly label
2024-12-13 09:41:17 -05:00
Addison Beck
09db6c79cb
chore(codeowners): assign a bunch of workflows to platform ( #5136 )
2024-12-11 06:31:22 -05:00
Opeyemi
9ebddd223a
[BRE-470] - Update Renovate Conf for BRE team ( #5123 )
2024-12-06 11:53:52 -05:00
Robyn MacCallum
04f9d7dd8e
Remove SM team from CODEOWNERS ( #5117 )
2024-12-05 09:40:55 -05:00
Michał Chęciński
470a12640e
Trigger unified build on rc and hotfix-rc branches ( #5108 )
2024-12-04 13:18:58 +00:00
Michał Chęciński
8b1b07884e
Fix github token generating in repository-management.yml workflow ( #5038 )
2024-11-14 13:47:37 +01:00
Matt Bishop
eec4a77bda
Check run earlier during setup ( #5022 )
2024-11-11 13:19:20 -05:00
Alex Urbina
89be2f495a
Fix Hackerone Report ID 2830741 ( #5010 )
2024-11-08 20:41:58 +00:00
MtnBurrit0
a56f3a587c
Update logic to handle pull_request_target ( #5008 )
...
- Removing the grep and create a conditional based on GITHUB_EVENT_NAME
2024-11-08 11:58:07 -07:00
Matt Bishop
e7cbdaa469
Only build Unified on main branch pushes ( #5006 )
2024-11-08 10:31:18 -05:00
Matt Bishop
fcb706b9c5
Catch PR targets for certain build operations ( #5003 )
...
* Catch PR targets for certain build operations
* Support EE
2024-11-07 17:11:01 -05:00
Matt Bishop
f7957f7053
Check run permissions for secrets usage ( #4992 )
2024-11-07 09:56:57 -05:00
Justin Baur
b5014ed6d8
Add MariaDB test ( #4989 )
...
* Add MariaDB Test
* Use Correct Syntax
* Use Container Name
* Add Port
* Remove MySQL Thing
* Remove Another Thing
* Different Port Syntax
* Add Back Skipped Checks
* Use Correct Connection String in Test Setup
* Update .github/workflows/test-database.yml
Co-authored-by: Matt Bishop <mbishop@bitwarden.com>
* Update .github/workflows/test-database.yml
Co-authored-by: Matt Bishop <mbishop@bitwarden.com>
* Use MariaDB 10
---------
Co-authored-by: Matt Bishop <mbishop@bitwarden.com>
2024-11-06 21:51:10 +00:00
Justin Baur
355ebfa889
Move Packages to Platform Ownership ( #4988 )
2024-11-06 19:36:07 +00:00
Matt Bishop
e7bd31c009
Check for secrets on Docker builds ( #4985 )
2024-11-06 13:56:12 -05:00
Matt Bishop
d63e18ec7a
Check for secrets on database test report upload ( #4984 )
2024-11-06 11:38:25 -05:00
Vince Grassia
fded36c999
Add version bump task ( #4976 )
2024-11-05 11:47:58 -05:00
renovate[bot]
2abd37d2d7
[deps] DevOps: Update gh minor ( #4945 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-30 11:23:50 -04:00
Vince Grassia
9a499df0e7
BRE-344 - Add PR logic to Repository Management workflow ( #4938 )
2024-10-24 13:15:16 -06:00
MtnBurrit0
724f2ee5e5
Secure inputs ( #4927 )
2024-10-22 10:29:57 -06:00
MtnBurrit0
bf976706f7
Manage ephemeral configs ( #4926 )
...
* Add ephemeral-environment label and cleanup workflow call
* Update workflow call to main
* switch to process.env
2024-10-22 10:24:25 -06:00
Michał Chęciński
00bfcb5fa5
[BRE-101] Remove dept-devops from CODEOWNERS ( #4176 )
2024-10-22 10:37:43 -04:00
Opeyemi
c809794642
[BRE-372] - Clean up document start ( #4915 )
2024-10-21 13:11:59 +01:00
AJ
1fb366d42b
Replace github.ref with GITHUB_REF in build.yml scripts ( #4857 )
...
Data should be separated from code where possible to avoid injection (CWE-78).
* https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions#understanding-the-risk-of-script-injections
* https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/store-information-in-variables#default-environment-variables
2024-10-17 11:50:31 -04:00
renovate[bot]
245e2e4d52
[deps] DevOps: Update gh minor ( #4885 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-17 10:42:44 -04:00
renovate[bot]
8e62e9eb38
[deps] DevOps: Update anchore/scan-action action to v5 ( #4892 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-17 10:42:26 -04:00
Thomas Avery
c643f8fd31
Add Key Management team to code owners ( #4899 )
2024-10-16 10:08:49 -05:00
Vince Grassia
7408f3ee02
BRE-344 - Create Repository Management workflow ( #4863 )
2024-10-15 11:02:53 -04:00
MtnBurrit0
96f58dc309
BRE-349: Call _update_ephemeral_tags workflow ( #4850 )
...
* Kick off ephemeral environment updates
* Fix missing ,
* Switch to head_ref
* Update to `main`
2024-10-10 09:49:04 -06:00
Vince Grassia
9cb99298fc
Remove container-registry-purge workflow ( #4843 )
2024-10-02 15:09:17 +00:00
Alexey Zilber
2915c10bd2
Latest tag doesn't exist anymore, defaulting to 180d ( #4841 )
2024-10-02 10:16:03 +01:00
renovate[bot]
793ef3aab8
[deps] DevOps: Update gh minor ( #4828 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-30 11:36:51 +02:00
renovate[bot]
3381bca608
[deps] DevOps: Update gh minor ( #4780 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-24 11:31:57 -04:00
Vince Grassia
c0be813a3b
Update output to use proper variable name ( #4788 )
2024-09-18 09:12:46 -06:00
Opeyemi
3824f0f821
[BRE-246] - Use GH App for Auto PR ( #4762 )
...
* Use GH-App for rc-cut workflow
* Test
* update version
2024-09-16 16:26:15 +01:00
