Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

feat: adds action to update dependencies. #18

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

jcchavezs
Copy link
Member

This PR adds an action to manually trigger the update of CRS or Coraza.

@jcchavezs jcchavezs mentioned this pull request Apr 1, 2024
@jcchavezs jcchavezs requested a review from fzipi April 1, 2024 19:12
Comment on lines +51 to +52
# deprecated. see https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
#run: echo "::set-output name=changed::$(git status --porcelain | wc -l)"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
# deprecated. see https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
#run: echo "::set-output name=changed::$(git status --porcelain | wc -l)"

Do we need to add this deprecated command and note on a newly created code?

#run: echo "::set-output name=changed::$(git status --porcelain | wc -l)"
run: echo "changed=$(git status --porcelain | wc -l)" >> $GITHUB_OUTPUT

- uses: stefanzweifel/git-auto-commit-action@v5
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Am I missing something, or do you wish to skip opening a PR? If so, mixed feelings here, the import code should be okay, but even a self-approval while taking a quick look at the changes might be better than just pushing

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A legit question but what would that double check be? also, who performs it? I think what we could probably do is to make coraza parse the entire ruleset. Thoughts @anuraaga ?

@fzipi
Copy link
Member

fzipi commented Jul 25, 2024

Why not just use renovatebot here?

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants