4 Commits

Author	SHA1	Message	Date
naveensrinivasan	21f80fa137	chore: Set permissions for GitHub actions ... Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs [Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/) Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>	2022-04-19 11:33:48 +03:00
Roman Khavronenko	8b67168609	ci: bump go version to 1.17 (#1895) ... The bump was required for `vmalert` package. `vmalert` docs now also contain an updated description. Signed-off-by: hagen1778 <roman@victoriametrics.com>	2021-12-02 14:51:45 +02:00
Aliaksandr Valialkin	36a79b7fd3	Add make check-licenses rule for the ability to manually check licenses in vendored dependencies ... This is a follow-up for c687536956	2021-05-10 12:01:37 +03:00
Artem Navoiev	632eb82dbd	Add vendor license checker, update codecov action, add dependbot for … (#1280) ... * Add vendor license checker, update codecov action, add dependbot for github actions * update gitingore, temprorary turn on check * fix action name * change action rules to trigger only when vendor changes * remove obsolete line from main action	2021-05-10 12:01:20 +03:00