cisagov / skeleton-generic

A generic skeleton project for quickly getting a new cisagov project started.
Creative Commons Zero v1.0 Universal
13 stars 11 forks source link

Add a diagnostics job for the label syncing workflow #150

Closed jsf9k closed 3 months ago

jsf9k commented 9 months ago

Also add a runner hardening task to the labeler job.

๐Ÿ—ฃ Description

This pull request adds a diagnostics job to the sync-labels.yml workflow. It also adds a runner hardening task to the labeler job in that workflow.

๐Ÿ’ญ Motivation and context

This agrees with the changes we made to the build.yml workflow in #144. I believe such changes should be made globally to all of our workflows, with the goal of eventually changing the runner hardening task to enforce (as opposed to audit) the hardening rules.

๐Ÿงช Testing

All automated tests pass. I examined the results of the workflow runs with my ocular orbs.

โœ… Pre-approval checklist