mirror of
https://github.com/go-gitea/gitea.git
synced 2026-08-07 02:46:02 +00:00
silverwind
d8c3a1afda
Enable more strict "pedantic" zizmor rules and fix issues. Service containers are pinned to hash and renovate will update them. Enabled rules: - https://docs.zizmor.sh/audits/#excessive-permissions - https://docs.zizmor.sh/audits/#unpinned-images - https://docs.zizmor.sh/audits/#template-injection --------- Signed-off-by: silverwind <me@silverwind.io>
35 lines
1.0 KiB
YAML
35 lines
1.0 KiB
YAML
name: cron-licenses
|
|
|
|
on:
|
|
# schedule:
|
|
# - cron: "7 0 * * 1" # every Monday at 00:07 UTC
|
|
workflow_dispatch:
|
|
|
|
permissions: {}
|
|
|
|
jobs:
|
|
cron-licenses:
|
|
runs-on: ubuntu-latest
|
|
if: github.repository == 'go-gitea/gitea'
|
|
permissions:
|
|
contents: write
|
|
steps:
|
|
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
|
|
- uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
|
|
with:
|
|
go-version-file: go.mod
|
|
check-latest: true
|
|
cache: false
|
|
- run: make generate-gitignore
|
|
timeout-minutes: 40
|
|
- name: push translations to repo
|
|
uses: appleboy/git-push-action@3b2c8661652360dbf1afe1b319a49dbb739c39f1 # v1.2.0
|
|
with:
|
|
author_email: "teabot@gitea.io"
|
|
author_name: GiteaBot
|
|
branch: main
|
|
commit: true
|
|
commit_message: "[skip ci] Updated licenses and gitignores"
|
|
remote: "git@github.com:go-gitea/gitea.git"
|
|
ssh_key: ${{ secrets.DEPLOY_KEY }}
|