 stepsecurity-app[bot]
|
2a077cae5e
|
feat(security): security best practices from StepSecurity (#11937)
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-07-10 09:00:40 +02:00 |
|
|
Adrián Peña
|
6c5f54808d
|
feat: add changelog fragments workflow (#11572)
|
2026-07-08 10:19:12 +02:00 |
|
|
César Arroba
|
8fbc721223
|
ci(workflows): allowlist nodejs.org and Iconify endpoints in UI tests harden-runner (#11744)
|
2026-06-30 17:43:02 +02:00 |
|
|
Alan Buscaglia
|
49309b43d3
|
feat(ui): UI onboarding system (#11430)
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
Co-authored-by: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com>
|
2026-06-15 13:53:48 +02:00 |
|
|
Pablo Fernandez Guerra (PFE)
|
8f745cdbe6
|
chore(ui): upgrade pnpm to 11 and harden supply-chain defaults (#11225)
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com>
|
2026-05-28 14:39:57 +02:00 |
|
|
dependabot[bot]
|
c660b35ed6
|
chore(deps): bump step-security/harden-runner from 2.19.1 to 2.19.3 (#11267)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-21 09:33:57 +02:00 |
|
|
dependabot[bot]
|
f210c26c2f
|
chore(deps): bump tj-actions/changed-files from 47.0.5 to 47.0.6 (#10963)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-21 09:09:43 +02:00 |
|
|
dependabot[bot]
|
8caab36c3f
|
chore(deps): bump actions/cache from 5.0.4 to 5.0.5 (#10951)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-21 08:53:08 +02:00 |
|
|
dependabot[bot]
|
6ef70484c7
|
chore(deps): bump step-security/harden-runner from 2.16.0 to 2.19.1 (#10953)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-21 08:32:05 +02:00 |
|
|
Alan Buscaglia
|
0b4393776c
|
chore: harden npm supply chain controls (#11157)
|
2026-05-13 17:30:25 +02:00 |
|
|
Pablo Fernandez Guerra (PFE)
|
1090ed59b7
|
feat(ui): replace D3+Dagre attack path graph with React Flow (#10686)
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com>
|
2026-05-12 16:33:29 +02:00 |
|
|
César Arroba
|
8affbf44ce
|
revert(ci): drop workflow-level paths on required-check workflows (#11055)
|
2026-05-06 11:49:42 +02:00 |
|
|
César Arroba
|
98277689f5
|
ci: reduce GitHub Actions consumption across CI workflows (#11007)
|
2026-05-05 17:08:34 +02:00 |
|
|
stepsecurity-app[bot]
|
96e7d6cb3a
|
feat(security): security best practices from StepSecurity (#10682)
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-04-14 15:13:12 +02:00 |
|
|
dependabot[bot]
|
c6c000a369
|
chore(deps): bump actions/setup-node from 6.2.0 to 6.3.0 (#10545)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-09 10:23:18 +02:00 |
|
|
dependabot[bot]
|
a2b083e8c8
|
chore(deps): bump actions/cache from 5.0.3 to 5.0.4 (#10546)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-09 10:22:58 +02:00 |
|
|
dependabot[bot]
|
9a6a43637d
|
chore(deps): bump pnpm/action-setup from 4.2.0 to 5.0.0 (#10551)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-09 10:19:50 +02:00 |
|
|
dependabot[bot]
|
c21cf0ac20
|
chore(deps): bump tj-actions/changed-files from 47.0.4 to 47.0.5 (#10552)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-09 10:19:28 +02:00 |
|
|
Pablo Fernandez Guerra (PFE)
|
6ac90eb1b5
|
chore(ui): add pnpm supply chain security protections (#10471)
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com>
Co-authored-by: César Arroba <cesar@prowler.com>
|
2026-04-01 14:10:01 +02:00 |
|
|
Pepe Fagoaga
|
417be55604
|
feat(security): block mode for hardened runners (#10482)
|
2026-03-27 13:08:59 +01:00 |
|
|
stepsecurity-app[bot]
|
716c130140
|
feat(security): security best practices from StepSecurity (#10480)
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-03-26 13:58:19 +01:00 |
|
|
Pepe Fagoaga
|
36279f694c
|
chore(gha): ignore zizmor rules and fix version comment (#10459)
|
2026-03-25 09:09:36 +01:00 |
|
|
dependabot[bot]
|
06e32e69c0
|
build(deps): bump actions/setup-node from 6.1.0 to 6.2.0 (#9933)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-03-13 09:51:27 +01:00 |
|
|
dependabot[bot]
|
41a7b19c7d
|
build(deps): bump actions/checkout from 6.0.1 to 6.0.2 (#9936)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-03-13 09:46:40 +01:00 |
|
|
dependabot[bot]
|
c972f19059
|
build(deps): bump actions/cache from 5.0.1 to 5.0.3 (#9934)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-03-13 09:45:26 +01:00 |
|
|
dependabot[bot]
|
f55e87d659
|
build(deps): bump tj-actions/changed-files from 47.0.1 to 47.0.4 (#10203)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-03-13 09:40:31 +01:00 |
|
|
Pepe Fagoaga
|
8af9b333c9
|
ci: restore persist credentials when no output is generated (#10211)
|
2026-03-02 09:14:02 +01:00 |
|
|
Pepe Fagoaga
|
7adcbed727
|
fix(ci): zizmor security improvements (#10207)
|
2026-03-02 08:24:51 +01:00 |
|
|
Andoni Alonso
|
8be218b29f
|
fix(ci): harden GitHub Actions workflows against expression injection (#10200)
|
2026-03-01 19:58:43 +01:00 |
|
|
Alan Buscaglia
|
639333b540
|
feat(ui): setup vitest with react testing library and TDD workflow (#9925)
|
2026-02-18 11:25:50 +01:00 |
|
|
Alan Buscaglia
|
607cfd61ef
|
perf(ui): optimize CI cache for pnpm and Next.js builds (#9843)
|
2026-01-21 13:18:31 +01:00 |
|
|
Alejandro Bailo
|
484a1d1fef
|
chore: upgrade Node.js to 24.13.0 LTS (#9797)
|
2026-01-15 12:46:42 +01:00 |
|
|
Alan Buscaglia
|
c8fab497fd
|
feat(skills): sync AGENTS.md to AI-specific formats (#9751)
Co-authored-by: Alan-TheGentleman <alan@thegentleman.dev>
Co-authored-by: pedrooot <pedromarting3@gmail.com>
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
|
2026-01-13 11:44:44 +01:00 |
|
|
dependabot[bot]
|
73375ee289
|
build(deps): bump tj-actions/changed-files from 47.0.0 to 47.0.1 (#9711)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-01-08 13:30:41 +01:00 |
|
|
dependabot[bot]
|
858446c740
|
build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 (#9707)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-01-08 13:00:44 +01:00 |
|
|
dependabot[bot]
|
319f5b6c38
|
build(deps): bump actions/cache from 4.3.0 to 5.0.1 (#9706)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-01-08 12:54:40 +01:00 |
|
|
dependabot[bot]
|
3cf7f7845e
|
build(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#9397)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2025-12-23 09:20:19 +01:00 |
|
|
Alan Buscaglia
|
7288585fec
|
chore(ui): migrate from npm to pnpm (#9442)
|
2025-12-04 15:12:39 +01:00 |
|
|
César Arroba
|
166ab1d2c1
|
chore(github): fix actions paths (#9154)
|
2025-11-04 12:27:34 +01:00 |
|
|
César Arroba
|
4feab1be55
|
chore(github): separate ui pr jobs in different actions (#9076)
|
2025-10-30 10:02:41 +01:00 |
|