diff --git a/.github/workflows/compliance.yml b/.github/workflows/compliance.yml new file mode 100644 index 0000000..5dd1085 --- /dev/null +++ b/.github/workflows/compliance.yml @@ -0,0 +1,22 @@ +name: Compliance + +on: + pull_request: + branches: [ main ] + +permissions: + contents: read + +jobs: + compliance: + runs-on: ubuntu-latest + steps: + - name: ⬇️ Checkout + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false + - name: Plumber + uses: outscale/.github/pipeline-compliance@f4952618256a12ea89d93ba7105866b80bd62266 # v1.0.0 + with: + plumber-threshold: 100 + github-token: ${{ secrets.PLUMBER_TOKEN }} diff --git a/.github/workflows/cred-scan.yml b/.github/workflows/cred-scan.yml deleted file mode 100644 index f45c72e..0000000 --- a/.github/workflows/cred-scan.yml +++ /dev/null @@ -1,18 +0,0 @@ -name: Credential Scanner - -on: - pull_request: - branches: [ main ] - -permissions: - contents: read - -jobs: - cred-scan: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - - name: Scan credentials - uses: outscale/cred-scan@36ef82cc690d72a17bf0993ab323961f1b1f9c66 # main - with: - scan_path: "./" diff --git a/.github/workflows/github-sanity-scan.yml b/.github/workflows/github-sanity-scan.yml deleted file mode 100644 index b486c81..0000000 --- a/.github/workflows/github-sanity-scan.yml +++ /dev/null @@ -1,18 +0,0 @@ -name: Github sanity scanner - -on: - pull_request: - branches: [ main ] - -permissions: - contents: read - -jobs: - github-sanity-scan: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - - name: Github sanity scanner - uses: outscale/github-sanity-scan@380a9927b4be45d9c4f6f66a4e8dfd7cf7b18513 # main - with: - no-pull-request-target: true diff --git a/.github/workflows/sync-labels.yml b/.github/workflows/sync-labels.yml deleted file mode 100644 index 1acfaf5..0000000 --- a/.github/workflows/sync-labels.yml +++ /dev/null @@ -1,16 +0,0 @@ -name: Sync labels -on: - workflow_dispatch: - -permissions: - issues: write # needed to edit labels - -jobs: - sync: - runs-on: ubuntu-latest - steps: - - uses: EndBug/label-sync@52074158190acb45f3077f9099fea818aa43f97a # v2 - with: - config-file: 'https://raw.githubusercontent.com/outscale/.github/main/labels.yml' - # delete-other-labels: false # set to true for strict sync - # dry-run: false # set to true to preview changes