dependabot[bot]
3fbd699546
ci(deps): bump github/codeql-action from 3 to 4 ( #129 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-22 09:20:21 -06:00
Cody Kickertz
c89ee01b63
chore(ci): standardize branch naming to use main instead of master ( #90 )
...
- Update workflow triggers to use main instead of master
- Update CONTRIBUTING.md to reference main branch
- Aligns with documentation in CLAUDE.md
Closes #52
Note: Actual branch rename (master → main) must be done on GitHub.
Co-authored-by: admin <admin@ardentleatherworks.com>
2025-12-20 09:00:25 -06:00
admin
c0ae8a8506
fix(ci): pin Trivy action and update branding
2025-12-19 10:44:32 -06:00
dependabot[bot]
ff176f6c2e
ci(deps): bump actions/checkout from 4 to 6
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-12-18 19:56:59 +00:00
admin
f7098a3a49
fix(ci): use filesystem scan instead of image scan for Trivy
2025-12-18 13:39:07 -06:00
admin
4fe3c5f483
fix(ci): correct Dockerfile path and skip SonarCloud when token missing
2025-12-18 13:37:45 -06:00
admin
81b3814c1a
ci: fix workflow configs and add dependabot
...
- SonarCloud: add proper projectKey and organization
- Trivy: fix image reference, add schedule comment
- Super Linter: upgrade to v6, configure linter selection
- Add Dependabot for NuGet, npm, Docker, GitHub Actions
2025-12-18 13:34:45 -06:00
Cody Kickertz
6a76b0b89d
Add Trivy vulnerability scanning workflow
2025-12-18 13:30:49 -06:00
