diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 1d74f38a5..31701f90a 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -2,9 +2,11 @@ # https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file version: 2 updates: - - package-ecosystem: "maven" - directory: "/" + - package-ecosystem: 'maven' + directory: '/' schedule: - interval: "weekly" + interval: 'weekly' commit-message: - prefix: "build" + prefix: 'build' + ignore: + - dependency-name: 'jakarta.servlet:jakarta-servlet-api' diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index de4cbbf9e..09a197894 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -1,9 +1,9 @@ -name: "CodeQL" +name: CodeQL on: push: - branches: [ "main" ] + branches: [ 'main' ] pull_request: - branches: [ "main" ] + branches: [ 'main' ] schedule: - cron: '35 2 * * 2' @@ -11,7 +11,7 @@ permissions: read-all jobs: analyze: - name: Analyze (${{ matrix.language }}) + name: "Analyze (java-kotlin)" runs-on: 'ubuntu-latest' permissions: # required for all workflows @@ -39,4 +39,4 @@ jobs: - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@cbe18979603527f12c7871a6eb04833ecf1548c7 with: - category: "/language:${{matrix.language}}" + category: "/language:java-kotlin" diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index d55ae4def..938b7a89e 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -12,7 +12,7 @@ on: schedule: - cron: '16 23 * * 2' push: - branches: [ "main" ] + branches: [ 'main' ] # Declare default permissions as read only. permissions: read-all @@ -31,12 +31,12 @@ jobs: # actions: read steps: - - name: "Checkout code" + - name: Checkout code uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 with: persist-credentials: false - - name: "Run analysis" + - name: Run analysis uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 with: results_file: results.sarif @@ -58,7 +58,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - - name: "Upload artifact" + - name: Upload artifact uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 with: name: SARIF file @@ -67,7 +67,7 @@ jobs: # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable upload of results to your repo's Code Scanning dashboard - - name: "Upload to code-scanning" + - name: Upload to code-scanning uses: github/codeql-action/upload-sarif@86b04fb0e47484f7282357688f21d5d0e32175fe with: sarif_file: results.sarif