4darsh-Dev / DecenTrade

DecenTrade is a decentralized digital marketplace built on the Ethereum blockchain, enabling secure and transparent transactions for digital assets.
https://decentrade.vercel.app
MIT License
14 stars 63 forks source link

added workflows actions #13

Closed 4darsh-Dev closed 1 month ago

4darsh-Dev commented 1 month ago

Description

Added following workflow actions for automated checks and passes :

  1. codeql.yml
  2. dependency.yml
  3. greet.yml
  4. issue-labeler.yml
  5. label.yml
  6. issue_close_greet.yml
  7. funding.yml
vercel[bot] commented 1 month ago

The latest updates on your projects. Learn more about Vercel for Git β†—οΈŽ

Name Status Preview Comments Updated (UTC)
decentrade βœ… Ready (Inspect) Visit Preview πŸ’¬ Add feedback Sep 29, 2024 0:26am
deepsource-io[bot] commented 1 month ago

Here's the code health analysis summary for commits f8164ac..5670100. View details on DeepSource β†—.

Analysis Summary

AnalyzerStatusSummaryLink
DeepSource Shell LogoShellβœ… SuccessView Check β†—
DeepSource JavaScript LogoJavaScriptβœ… SuccessView Check β†—

πŸ’‘ If you’re a repository administrator, you can configure the quality gates from the settings.
github-actions[bot] commented 1 month ago

Dependency Review

βœ… No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/actions/checkout 4.*.* :green_circle: 6.9
Details
CheckScoreReason
Code-Review:green_circle: 10all changesets reviewed
Maintained:green_circle: 56 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Fuzzing:warning: 0project is not fuzzed
Security-Policy:green_circle: 9security policy file detected
Pinned-Dependencies:green_circle: 3dependency not pinned by hash detected -- score normalized to 3
Packaging:green_circle: 10packaging workflow detected
SAST:green_circle: 9SAST tool detected but not run on all commits
Vulnerabilities:green_circle: 91 existing vulnerabilities detected
actions/github/codeql-action/analyze 3.*.* UnknownUnknown
actions/github/codeql-action/autobuild 3.*.* UnknownUnknown
actions/github/codeql-action/init 3.*.* UnknownUnknown
actions/actions/checkout 4.*.* :green_circle: 6.9
Details
CheckScoreReason
Code-Review:green_circle: 10all changesets reviewed
Maintained:green_circle: 56 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Fuzzing:warning: 0project is not fuzzed
Security-Policy:green_circle: 9security policy file detected
Pinned-Dependencies:green_circle: 3dependency not pinned by hash detected -- score normalized to 3
Packaging:green_circle: 10packaging workflow detected
SAST:green_circle: 9SAST tool detected but not run on all commits
Vulnerabilities:green_circle: 91 existing vulnerabilities detected
actions/actions/dependency-review-action 4.*.* :green_circle: 7.2
Details
CheckScoreReason
Code-Review:green_circle: 10all changesets reviewed
Maintained:green_circle: 1026 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Packaging:warning: -1packaging workflow not detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Security-Policy:green_circle: 9security policy file detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies:warning: 1dependency not pinned by hash detected -- score normalized to 1
Fuzzing:warning: 0project is not fuzzed
SAST:green_circle: 9SAST tool detected but not run on all commits
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
actions/actions/first-interaction 1.*.* :green_circle: 5.8
Details
CheckScoreReason
Code-Review:green_circle: 8Found 11/13 approved changesets -- score normalized to 8
Maintained:warning: 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Packaging:warning: -1packaging workflow not detected
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Fuzzing:warning: 0project is not fuzzed
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
Security-Policy:green_circle: 9security policy file detected
SAST:green_circle: 8SAST tool detected but not run on all commits
actions/actions/github-script 4.*.* :green_circle: 6.4
Details
CheckScoreReason
Code-Review:green_circle: 10all changesets reviewed
Maintained:green_circle: 77 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 7
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Packaging:warning: -1packaging workflow not detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies:warning: 1dependency not pinned by hash detected -- score normalized to 1
Fuzzing:warning: 0project is not fuzzed
Security-Policy:green_circle: 9security policy file detected
SAST:green_circle: 10SAST tool is run on all commits
Vulnerabilities:green_circle: 55 existing vulnerabilities detected
actions/actions/labeler 4.*.* :green_circle: 5.9
Details
CheckScoreReason
Code-Review:green_circle: 10all changesets reviewed
Maintained:warning: 01 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Packaging:warning: -1packaging workflow not detected
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing:warning: 0project is not fuzzed
Security-Policy:green_circle: 9security policy file detected
SAST:green_circle: 7SAST tool is not run on all commits -- score normalized to 7
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
actions/github/issue-labeler 3.4.* :green_circle: 4.8
Details
CheckScoreReason
Code-Review:green_circle: 7Found 22/30 approved changesets -- score normalized to 7
Maintained:warning: 00 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Packaging:warning: -1packaging workflow not detected
Token-Permissions:warning: -1No tokens found
Security-Policy:green_circle: 3security policy file detected
Dangerous-Workflow:warning: -1no workflows found
Binary-Artifacts:green_circle: 10no binaries found in the repo
Pinned-Dependencies:warning: -1no dependencies found
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Fuzzing:warning: 0project is not fuzzed
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0

Scanned Manifest Files

.github/workflows/codeql.yml
  • actions/checkout@4.*.*
  • github/codeql-action/analyze@3.*.*
  • github/codeql-action/autobuild@3.*.*
  • github/codeql-action/init@3.*.*
.github/workflows/dependency-review.yml
  • actions/checkout@4.*.*
  • actions/dependency-review-action@4.*.*
.github/workflows/greetings.yml
  • actions/first-interaction@1.*.*
.github/workflows/issue_close_greet.yml
  • actions/github-script@4.*.*
.github/workflows/label.yml
  • actions/labeler@4.*.*
  • github/issue-labeler@3.4.*
github-advanced-security[bot] commented 1 month ago

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.