 renovate[bot]
|
902a7e8056
|
chore(ci): update github-actions
|
2026-07-23 18:38:37 +00:00 |
|
|
stepsecurity-app[bot]
|
2a077cae5e
|
feat(security): security best practices from StepSecurity (#11937)
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-07-10 09:00:40 +02:00 |
|
|
Adrián Peña
|
6c5f54808d
|
feat: add changelog fragments workflow (#11572)
|
2026-07-08 10:19:12 +02:00 |
|
|
César Arroba
|
a679865cce
|
ci: always run container and dependency vulnerability scans on PRs (#11582)
|
2026-06-15 10:38:28 +02:00 |
|
|
dependabot[bot]
|
c660b35ed6
|
chore(deps): bump step-security/harden-runner from 2.19.1 to 2.19.3 (#11267)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-21 09:33:57 +02:00 |
|
|
dependabot[bot]
|
f210c26c2f
|
chore(deps): bump tj-actions/changed-files from 47.0.5 to 47.0.6 (#10963)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-21 09:09:43 +02:00 |
|
|
dependabot[bot]
|
6ef70484c7
|
chore(deps): bump step-security/harden-runner from 2.16.0 to 2.19.1 (#10953)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-21 08:32:05 +02:00 |
|
|
Pepe Fagoaga
|
3410fc927a
|
chore(security): replace safety with osv-scanner (#11167)
|
2026-05-14 14:35:09 +02:00 |
|
|
Adrián Peña
|
7d3ed62e90
|
chore(sdk): migrate from poetry to uv (#11162)
|
2026-05-14 12:51:57 +02:00 |
|
|
César Arroba
|
98277689f5
|
ci: reduce GitHub Actions consumption across CI workflows (#11007)
|
2026-05-05 17:08:34 +02:00 |
|
|
Pepe Fagoaga
|
c27cb28a2a
|
chore(safety): define policy for high and critical (#10845)
|
2026-04-22 13:28:59 +02:00 |
|
|
stepsecurity-app[bot]
|
96e7d6cb3a
|
feat(security): security best practices from StepSecurity (#10682)
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-04-14 15:13:12 +02:00 |
|
|
Josema Camacho
|
51591cb8cd
|
build: bump poetry to 2.3.4 and consolidate SDK workflows (#10681)
|
2026-04-14 13:32:46 +02:00 |
|
|
dependabot[bot]
|
c21cf0ac20
|
chore(deps): bump tj-actions/changed-files from 47.0.4 to 47.0.5 (#10552)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-09 10:19:28 +02:00 |
|
|
Pepe Fagoaga
|
417be55604
|
feat(security): block mode for hardened runners (#10482)
|
2026-03-27 13:08:59 +01:00 |
|
|
stepsecurity-app[bot]
|
716c130140
|
feat(security): security best practices from StepSecurity (#10480)
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-03-26 13:58:19 +01:00 |
|
|
dependabot[bot]
|
41a7b19c7d
|
build(deps): bump actions/checkout from 6.0.1 to 6.0.2 (#9936)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-03-13 09:46:40 +01:00 |
|
|
dependabot[bot]
|
27d074abe4
|
build(deps): bump actions/setup-python from 5.3.0 to 6.2.0 (#9932)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-03-13 09:44:28 +01:00 |
|
|
dependabot[bot]
|
f55e87d659
|
build(deps): bump tj-actions/changed-files from 47.0.1 to 47.0.4 (#10203)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-03-13 09:40:31 +01:00 |
|
|
Pepe Fagoaga
|
8af9b333c9
|
ci: restore persist credentials when no output is generated (#10211)
|
2026-03-02 09:14:02 +01:00 |
|
|
Andoni Alonso
|
8be218b29f
|
fix(ci): harden GitHub Actions workflows against expression injection (#10200)
|
2026-03-01 19:58:43 +01:00 |
|
|
Alan Buscaglia
|
c8fab497fd
|
feat(skills): sync AGENTS.md to AI-specific formats (#9751)
Co-authored-by: Alan-TheGentleman <alan@thegentleman.dev>
Co-authored-by: pedrooot <pedromarting3@gmail.com>
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
|
2026-01-13 11:44:44 +01:00 |
|
|
Pepe Fagoaga
|
9ee77c2b97
|
chore(security): Remove safety check ignores as they are fixed (#9752)
|
2026-01-12 12:02:22 +01:00 |
|
|
dependabot[bot]
|
73375ee289
|
build(deps): bump tj-actions/changed-files from 47.0.0 to 47.0.1 (#9711)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-01-08 13:30:41 +01:00 |
|
|
dependabot[bot]
|
ca9211b5ed
|
build(deps): bump actions/setup-python from 6.0.0 to 6.1.0 (#9390)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2025-12-23 09:26:54 +01:00 |
|
|
dependabot[bot]
|
3cf7f7845e
|
build(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#9397)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2025-12-23 09:20:19 +01:00 |
|
|
César Arroba
|
166ab1d2c1
|
chore(github): fix actions paths (#9154)
|
2025-11-04 12:27:34 +01:00 |
|
|
César Arroba
|
7e7f160b9a
|
chore(sdk): allow sdk checks only on prowler repository (#9116)
|
2025-10-31 11:31:25 +01:00 |
|
|
César Arroba
|
5bc9b09490
|
chore(github): separate sdk pr jobs in different actions (#9075)
|
2025-10-30 10:02:22 +01:00 |
|