Commit Graph

9 Commits

Author SHA1 Message Date
naveensrinivasan
8446cda519
Set permissions for GitHub actions
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

 Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-04-16 01:58:38 +00:00
Jeremy Benoist
0ac8089eee
CI workaround for PHP < 7.4 & MySQL 8
The error on PHP 7.2 & 7.3 is:

> PDO::__construct(): The server requested authentication method unknown to the client [caching_sha2_password]

See:
- https://stackoverflow.com/q/53066962/569101
- https://stackoverflow.com/q/52364415/569101
- https://stackoverflow.com/q/51489616/569101
- https://stackoverflow.com/q/50026939/569101

Also upgrade `actions/checkout` v3
2022-04-11 22:11:22 +02:00
Jeremy Benoist
fea2b46496
Composer 2.3 isn't compatible with wallabag 2022-04-01 16:09:59 +02:00
Jeremy Benoist
3c507d676f
Add build test on PHP 8.0 & 8.1
Add `isTransactional` to `WallabagMigration` because PHP 8 behave differently with PDO transaction.
This is a workaround because we can't upgrade Doctrine Migration for now (upper versions have the fix).

- Build is now using Composer v2 (instead of v1)
- All actions have been updated to latest version
- Fix bug in PHP 8 were `$entry->getTags()` can't be properly used as a _traversable_ by `assertContains` during tests. Added a custom method `Entry::getTagsLabel()` which return a flatted tag array with only label
- Replace `assertNotRegExp` by `assertDoesNotMatchRegularExpression` because it was deprecated
2022-01-31 12:59:39 +01:00
Jeremy Benoist
96e2e8eeeb
Rebuild assets
Also update GitHub Actions to latest versions
2022-01-05 14:26:10 +01:00
Jeremy Benoist
6004de48ff
Allow GitHub Actions to run on 2.* branches
Since I created the 2.5.0 branch, GA on PR targeting that branch aren't triggered. This should fix this.
2020-12-31 14:18:49 +01:00
Jeremy Benoist
189a9ef033
Use ramsey/composer-install to handle composer install & cache 2020-12-03 10:16:03 +01:00
Jeremy Benoist
c29ad30b56
Jump to 18.04 as it offers Tidy extension by default too 2020-11-27 14:14:44 +01:00
Jeremy Benoist
40c01ad1d4
Ditch Travis to use GitHub Actions 2020-11-27 14:14:44 +01:00