OCram85/code-server
Archived
1
0
Fork 0
Code Pull Requests 2 Activity

refactor(ci): fix fetch-depth and add some caching (#5563)

Browse Source 
* refactor: rename ci -> build.yaml

* feat: add build.yaml

* feat: add node caching to platform jobs

* trigger ci
This commit is contained in:
Joe Previte
2022-09-19 09:56:34 -07:00
committed by GitHub
parent 987c68a32a
commit 4223cf6e2b
4 changed files with 44 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
docs/SECURITY.md
View File

@ -16,10 +16,10 @@ We use the following tools to help us stay on top of vulnerability mitigation.
- [trivy](https://github.com/aquasecurity/trivy)
- Comprehensive vulnerability scanner that runs on PRs into the default
branch and scans both our container image and repository code (see
`trivy-scan-repo` and `trivy-scan-image` jobs in `ci.yaml`)
`trivy-scan-repo` and `trivy-scan-image` jobs in `build.yaml`)
- [`audit-ci`](https://github.com/IBM/audit-ci)
- Audits npm and Yarn dependencies in CI (see `Audit for vulnerabilities` step
in `ci.yaml`) on PRs into the default branch and fails CI if moderate or
in `build.yaml`) on PRs into the default branch and fails CI if moderate or
higher vulnerabilities (see the `audit.sh` script) are present.
## Supported Versions