Commit graph

24 commits

Author SHA1 Message Date
Naveen
fd8af163ba
ci: Set permissions for GitHub actions (#17102)
chore: Set permissions for GitHub actions

 Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-06-08 11:55:16 +05:30
Ankush Menat
d79450c501
ci: add timeout to CI jobs (#15000)
once a day some job gets stuck and default timeout is 6 hours.

Changed timeout to 1 hour which is 3-4x more than max running time of
all jobs.
2021-11-17 15:37:28 +05:30
Gavin D'souza
42acb7647f ci: Upgrade Py37 to Py39 2021-10-07 20:33:50 +05:30
MitulDavid
b798b96deb ci: Set Codecov flags to categorize coverage 2021-10-04 08:21:40 +05:30
Ankush Menat
b33b469aff
Merge branch 'develop' into ci_ubuntu_latest 2021-09-07 13:10:56 +05:30
Suraj Shetty
fba196484c
ci: Conditionally run codecov upload 2021-09-06 22:50:42 +05:30
Suraj Shetty
f4e477ef42
ci: Run postgres builds as well after a push on develop 2021-09-02 13:06:48 +05:30
Suraj Shetty
cbd94bd33d ci: Set name for coverage data upload 2021-09-02 10:53:53 +05:30
Suraj Shetty
ba73d99377 ci: Enable code coverage for postgres build as well 2021-09-02 09:36:57 +05:30
Ankush Menat
765a255a00
ci: use ubuntu-latest for all jobs 2021-08-31 22:31:50 +05:30
Ankush Menat
d0099985fc
ci: concurrency control for postgres 2021-08-27 23:05:09 +05:30
Gavin D'souza
e2585cbc7e ci(roulette): Add support for running on forks 2021-08-25 13:46:09 +05:30
Gavin D'souza
e01ef7ff52 ci(roulette): Use GitHub REST to figure out changed files 2021-08-25 12:40:44 +05:30
Gavin D'souza
597d237f63 ci: Roulette for GHA 2021-08-24 20:41:24 +05:30
gavin
850939ed13 Revert "ci: ignore js only changes while running unittests (#13932)"
This reverts commit ead26527b7.
2021-08-24 13:26:03 +05:30
Ankush Menat
ead26527b7
ci: ignore js only changes while running unittests (#13932)
* ci: ignore js only changes while running unittests

- IF PR only changes JS files then unittests / patch tests wont run.
- Change done to save resources / concurrent builds.

* ci: ignore md files in build
2021-08-13 18:14:47 +05:30
Suraj Shetty
155b28cf51 ci: Update Job names
- Also, update mergify rules
2021-05-12 16:29:05 +05:30
Suraj Shetty
ed2a3aa589 ci: Add test orchestrator URL 2021-05-10 23:48:32 +05:30
Suraj Shetty
0d937cda27 fix: Get ORCHESTRATOR_URL from secrets 2021-05-10 16:14:36 +05:30
Suraj Shetty
1829fd3a2b ci: Run tests using orchestrator 2021-05-10 12:46:02 +05:30
Suraj Shetty
00b6a6729d ci: Use right parallel test runner command
- Also, fix coverage & coveralls setup
2021-05-07 21:59:58 +05:30
Suraj Shetty
aab2aca089 ci: Enable coveralls 2021-05-06 14:52:00 +05:30
Suraj Shetty
ad06165ab5 fix: Use GITHUB_RUN_ID for uniqueness
- Also rename tests
2021-05-03 00:41:37 +05:30
Suraj Shetty
7ac3b53c1c feat: Add support for build combined coverage file
- from parallel tests
- Update workflow files
2021-05-02 21:01:47 +05:30