eclipse-sirius / .eclipsefdn

Repository to host configurations related to the Eclipse Foundation.
https://eclipse-sirius.github.io/.eclipsefdn/
0 stars 2 forks source link

Enable secret scanning for all repos #5

Closed ghost closed 1 year ago

ghost commented 1 year ago

We (security team at EF: https://www.eclipse.org/security/team/) would like to enable secret scanning for all of the repos of eclipse projects hosted on GitHub. For that purpose we suggest changes to the configuration that the project leads can review.

github-actions[bot] commented 1 year ago
Diff for af10365e12151a3a4ef8223bd745ada3ab541e88: ```diff Printing local diff for configuration at '/home/runner/work/.eclipsefdn/.eclipsefdn/otterdog-configs/otterdog.json' Actions are indicated with the following symbols: + create ! modify ! forced update - delete Organization eclipse-sirius[id=eclipse-sirius] there have been 2 validation infos, enable verbose output with '-v' to to display them. ! repository[name="sirius-emf-json"] { ! secret_scanning = "disabled" -> "enabled" ! secret_scanning_push_protection = "disabled" -> "enabled" ! } ! repository[name="sirius-specs"] { ! secret_scanning = "disabled" -> "enabled" ! secret_scanning_push_protection = "disabled" -> "enabled" ! } ! repository[name="sirius-web"] { ! secret_scanning = "disabled" -> "enabled" ! secret_scanning_push_protection = "disabled" -> "enabled" ! } ! repository[name="sirius-website"] { ! secret_scanning = "disabled" -> "enabled" ! secret_scanning_push_protection = "disabled" -> "enabled" ! } Plan: 0 to add, 8 to change, 0 to delete. ``` ```diff Showing diff to a canonical version of the configuration at '/home/runner/work/.eclipsefdn/.eclipsefdn/otterdog-configs/otterdog.json' Organization eclipse-sirius[id=eclipse-sirius] --- original +++ canonical @@ -36,12 +36,14 @@ web_commit_signoff_required: false } orgs.newRepo('sirius-web') { + aliases: ['sirius-components'] allow_merge_commit: false allow_squash_merge: false allow_update_branch: false branch_protection_rules: [ orgs.newBranchProtectionRule('master') { required_approving_review_count: 1 + required_status_checks: [] requires_linear_history: true requires_strict_status_checks: true } ```
netomi commented 1 year ago

changes have been applied.