Skip to content

Commit a7c87df

Browse files
ashishkurmiashishkurmi
authored
Merge pull request #10 from step-security/staging
first actions version
2 parents 78a0da8 + 78b5191 commit a7c87df

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

54 files changed

+9114
-2
lines changed

‎.dockerignore

+12
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
/coverage
2+
3+
# Dependency directories
4+
node_modules/
5+
jspm_packages/
6+
7+
# yarn v2
8+
.yarn/cache
9+
.yarn/unplugged
10+
.yarn/build-state.yml
11+
.yarn/install-state.gz
12+
.pnp.*

‎.editorconfig

+15
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
# This file is for unifying the coding style for different editors and IDEs.
2+
# More information at http://editorconfig.org
3+
4+
root = true
5+
6+
[*]
7+
indent_style = space
8+
indent_size = 2
9+
end_of_line = lf
10+
charset = utf-8
11+
trim_trailing_whitespace = true
12+
insert_final_newline = true
13+
14+
[*.md]
15+
trim_trailing_whitespace = false

‎.eslintignore

+3
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
/dist/**
2+
/coverage/**
3+
/node_modules/**

‎.eslintrc.json

+24
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
{
2+
"env": {
3+
"node": true,
4+
"es6": true,
5+
"jest": true
6+
},
7+
"extends": [
8+
"eslint:recommended",
9+
"plugin:@typescript-eslint/eslint-recommended",
10+
"plugin:@typescript-eslint/recommended",
11+
"plugin:jest/recommended",
12+
"plugin:prettier/recommended"
13+
],
14+
"parser": "@typescript-eslint/parser",
15+
"parserOptions": {
16+
"ecmaVersion": "latest",
17+
"sourceType": "module"
18+
},
19+
"plugins": [
20+
"@typescript-eslint",
21+
"jest",
22+
"prettier"
23+
]
24+
}

‎.gitattributes

+4
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
/.yarn/releases/** binary
2+
/.yarn/plugins/** binary
3+
/dist/** linguist-generated=true
4+
/lib/** linguist-generated=true

‎.github/ISSUE_TEMPLATE/feature.yml

+15
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
# https://docs.github.com/en/communities/using-templates-to-encourage-useful-issues-and-pull-requests/syntax-for-githubs-form-schema
2+
name: Feature request
3+
description: Missing functionality? Come tell us about it!
4+
labels:
5+
- kind/enhancement
6+
- status/triage
7+
8+
body:
9+
- type: textarea
10+
id: description
11+
attributes:
12+
label: Description
13+
description: What is the feature you want to see?
14+
validations:
15+
required: true

‎.github/dependabot.yml

+19
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
version: 2
2+
updates:
3+
- package-ecosystem: "github-actions"
4+
directory: "/"
5+
schedule:
6+
interval: "daily"
7+
labels:
8+
- "kind/dependencies"
9+
- "bot"
10+
- package-ecosystem: "npm"
11+
directory: "/"
12+
schedule:
13+
interval: "daily"
14+
versioning-strategy: "increase"
15+
allow:
16+
- dependency-type: "production"
17+
labels:
18+
- "kind/dependencies"
19+
- "bot"

‎.github/ghaction-import-gpg.png

14.5 KB
Loading

‎.github/workflows/actions_release.yaml

+21
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
name: Release GitHub Actions
2+
3+
on:
4+
workflow_dispatch:
5+
inputs:
6+
tag:
7+
description: "Tag for the release"
8+
required: true
9+
10+
permissions:
11+
contents: read
12+
13+
jobs:
14+
release:
15+
permissions:
16+
actions: read
17+
id-token: write
18+
contents: write
19+
uses: step-security/reusable-workflows/.github/workflows/actions_release.yaml@v1
20+
with:
21+
tag: "${{ github.event.inputs.tag }}"

‎.github/workflows/ci.yml

+211
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,211 @@
1+
name: ci
2+
3+
concurrency:
4+
group: ${{ github.workflow }}-${{ github.ref }}
5+
cancel-in-progress: true
6+
7+
on:
8+
schedule:
9+
- cron: '0 10 * * *'
10+
push:
11+
branches:
12+
- 'master'
13+
- 'releases/v*'
14+
tags:
15+
- 'v*'
16+
pull_request:
17+
branches:
18+
- 'master'
19+
- 'releases/v*'
20+
21+
jobs:
22+
gpg:
23+
runs-on: ubuntu-latest
24+
steps:
25+
- name: Harden Runner
26+
uses: step-security/harden-runner@v2
27+
with:
28+
egress-policy: audit
29+
30+
-
31+
name: GPG conf
32+
run: |
33+
cat ~/.gnupg/gpg.conf || true
34+
35+
armored:
36+
runs-on: ${{ matrix.os }}
37+
strategy:
38+
fail-fast: false
39+
matrix:
40+
key:
41+
- test-key
42+
- test-subkey
43+
global:
44+
- false
45+
- true
46+
os:
47+
- ubuntu-latest
48+
- macOS-latest
49+
- windows-latest
50+
include:
51+
- key: test-subkey
52+
fingerprint: C17D11ADF199F12A30A0910F1F80449BE0B08CB8
53+
steps:
54+
- name: Harden Runner
55+
uses: step-security/harden-runner@v2
56+
with:
57+
egress-policy: audit
58+
59+
-
60+
name: Checkout
61+
uses: actions/checkout@v4
62+
-
63+
name: GPG conf
64+
uses: actions/github-script@v6
65+
with:
66+
script: |
67+
const fs = require('fs');
68+
const gnupgfolder = `${require('os').homedir()}/.gnupg`;
69+
if (!fs.existsSync(gnupgfolder)){
70+
fs.mkdirSync(gnupgfolder);
71+
}
72+
fs.chmodSync(gnupgfolder, '0700');
73+
fs.copyFile('__tests__/fixtures/gpg.conf', `${gnupgfolder}/gpg.conf`, (err) => {
74+
if (err) throw err;
75+
});
76+
-
77+
name: Get test key and passphrase
78+
uses: actions/github-script@v6
79+
id: test
80+
with:
81+
script: |
82+
const fs = require('fs');
83+
core.setOutput('pgp', fs.readFileSync('__tests__/fixtures/${{ matrix.key }}.pgp', {encoding: 'utf8'}));
84+
core.setOutput('passphrase', fs.readFileSync('__tests__/fixtures/${{ matrix.key }}.pass', {encoding: 'utf8'}));
85+
-
86+
name: Import GPG
87+
uses: ./
88+
with:
89+
gpg_private_key: ${{ steps.test.outputs.pgp }}
90+
passphrase: ${{ steps.test.outputs.passphrase }}
91+
trust_level: 5
92+
git_config_global: ${{ matrix.global }}
93+
git_user_signingkey: true
94+
git_commit_gpgsign: true
95+
git_tag_gpgsign: true
96+
git_push_gpgsign: if-asked
97+
fingerprint: ${{ matrix.fingerprint }}
98+
-
99+
name: List keys
100+
run: |
101+
gpg -K
102+
shell: bash
103+
104+
base64:
105+
runs-on: ${{ matrix.os }}
106+
strategy:
107+
fail-fast: false
108+
matrix:
109+
key:
110+
- test-key
111+
- test-subkey
112+
os:
113+
- ubuntu-latest
114+
- macOS-latest
115+
- windows-latest
116+
include:
117+
- key: test-subkey
118+
fingerprint: C17D11ADF199F12A30A0910F1F80449BE0B08CB8
119+
steps:
120+
- name: Harden Runner
121+
uses: step-security/harden-runner@v2
122+
with:
123+
egress-policy: audit
124+
125+
-
126+
name: Checkout
127+
uses: actions/checkout@v4
128+
-
129+
name: Get test key and passphrase
130+
uses: actions/github-script@v6
131+
id: test
132+
with:
133+
script: |
134+
const fs = require('fs');
135+
core.setOutput('pgp-base64', fs.readFileSync('__tests__/fixtures/${{ matrix.key }}-base64.pgp', {encoding: 'utf8'}));
136+
core.setOutput('passphrase', fs.readFileSync('__tests__/fixtures/${{ matrix.key }}.pass', {encoding: 'utf8'}));
137+
-
138+
name: Import GPG
139+
uses: ./
140+
with:
141+
gpg_private_key: ${{ steps.test.outputs.pgp-base64 }}
142+
passphrase: ${{ steps.test.outputs.passphrase }}
143+
git_user_signingkey: true
144+
git_commit_gpgsign: true
145+
git_tag_gpgsign: true
146+
git_push_gpgsign: if-asked
147+
fingerprint: ${{ matrix.fingerprint }}
148+
149+
trust:
150+
runs-on: ${{ matrix.os }}
151+
strategy:
152+
fail-fast: false
153+
matrix:
154+
key:
155+
- test-key
156+
level:
157+
- ''
158+
- 5
159+
- 4
160+
- 3
161+
- 2
162+
- 1
163+
os:
164+
- ubuntu-latest
165+
- macOS-latest
166+
- windows-latest
167+
steps:
168+
- name: Harden Runner
169+
uses: step-security/harden-runner@v2
170+
with:
171+
egress-policy: audit
172+
173+
-
174+
name: Checkout
175+
uses: actions/checkout@v4
176+
-
177+
name: GPG conf
178+
uses: actions/github-script@v6
179+
with:
180+
script: |
181+
const fs = require('fs');
182+
const gnupgfolder = `${require('os').homedir()}/.gnupg`;
183+
if (!fs.existsSync(gnupgfolder)){
184+
fs.mkdirSync(gnupgfolder);
185+
}
186+
fs.chmodSync(gnupgfolder, '0700');
187+
fs.copyFile('__tests__/fixtures/gpg.conf', `${gnupgfolder}/gpg.conf`, (err) => {
188+
if (err) throw err;
189+
});
190+
-
191+
name: Get test key and passphrase
192+
uses: actions/github-script@v6
193+
id: test
194+
with:
195+
script: |
196+
const fs = require('fs');
197+
core.setOutput('pgp', fs.readFileSync('__tests__/fixtures/${{ matrix.key }}.pgp', {encoding: 'utf8'}));
198+
core.setOutput('passphrase', fs.readFileSync('__tests__/fixtures/${{ matrix.key }}.pass', {encoding: 'utf8'}));
199+
-
200+
name: Import GPG
201+
id: import_gpg
202+
uses: ./
203+
with:
204+
gpg_private_key: ${{ steps.test.outputs.pgp }}
205+
passphrase: ${{ steps.test.outputs.passphrase }}
206+
trust_level: ${{ matrix.level }}
207+
-
208+
name: List trust values
209+
run: |
210+
gpg --export-ownertrust
211+
shell: bash

0 commit comments

Comments
 (0)