Commit Graph
9 Commits
Author SHA1 Message Date
Wilken Riveraandneilnaveen cc5898022a update action permissions (#11837)
* chore: Set permissions for GitHub actions

 Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: neilnaveen <[email protected]>

* Update permissions for newly added actions

* Remove deleted actions

Co-authored-by: neilnaveen <[email protected]>
2022-06-14 12:08:39 -04:00
dependabot[bot] a2d64720d7 Bump actions-ecosystem/action-create-comment from 1.0.0 to 1.0.2 (#11830)
Bumps [actions-ecosystem/action-create-comment](https://github.com/actions-ecosystem/action-create-comment) from 1.0.0 to 1.0.2.
- [Release notes](https://github.com/actions-ecosystem/action-create-comment/releases)
- [Commits](https://github.com/actions-ecosystem/action-create-comment/compare/v1.0.0...v1.0.2)

---
updated-dependencies:
- dependency-name: actions-ecosystem/action-create-comment
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-02 20:01:59 -04:00
dependabot[bot] 8e788a5f73 Bump actions-ecosystem/action-add-labels from 1.1.0 to 1.1.3 (#11829)
Bumps [actions-ecosystem/action-add-labels](https://github.com/actions-ecosystem/action-add-labels) from 1.1.0 to 1.1.3.
- [Release notes](https://github.com/actions-ecosystem/action-add-labels/releases)
- [Commits](https://github.com/actions-ecosystem/action-add-labels/compare/v1.1.0...v1.1.3)

---
updated-dependencies:
- dependency-name: actions-ecosystem/action-add-labels
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-02 20:01:40 -04:00
Lucas BajoletandWilken Rivera 08157fbdce Add workflow to link to discuss on new question (#11825)
* workflows: + automatic label/response on question

When a user asks a question through an issue on this repository, we
automatically add a comment, pointing to the forums, and add a label to
the issue so we can spot more easily which issues need to be acted on.

* .github: + link to packer community for questions

As extra to the github action, this commit adds an extra button to the
new issue template, leading directly to the discuss forums for Packer

* .github: add auto-stale-close issue action

As follow-up to the labelling of question type issues as needs-reply, we
add another action that will automatically mark an issue as stale if it
has not been updated for 3 weeks, and close the issue one week after
marking it as stale.

* Update .github/workflows/issues-opened.yml

Co-authored-by: Wilken Rivera <[email protected]>
2022-05-31 15:47:44 -04:00
Wilken Rivera adc130a73e Update project GitHub actions (#11805)
To assist in tracking newly created issues and pull-requests a new set
of actions is being added to assign inbound request to a new project
board. Where the team can view, filter, and organize in bound requests
across all Packer repos.
2022-05-25 17:01:04 -04:00
dependabot[bot] 6d8a9fb8e2 Bump github/issue-labeler from 2.4 to 2.5 (#11782)
Bumps [github/issue-labeler](https://github.com/github/issue-labeler) from 2.4 to 2.5.
- [Release notes](https://github.com/github/issue-labeler/releases)
- [Commits](https://github.com/github/issue-labeler/compare/v2.4...v2.5)

---
updated-dependencies:
- dependency-name: github/issue-labeler
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-17 20:56:56 -04:00
Wilken Rivera 202f93f6a9 Update issue-labeler action (#11699)
The latest release of the action requires the field
enable_versioned_regex to be set. We currently don't use
versioned_regex. So this change sets the field to false.
2022-04-12 17:57:00 -04:00
Wilken Rivera acd67d5ba0 Bump issues-labeler to proper version 2021-11-16 11:36:19 -05:00
Wilken Rivera 0a05b834d7 remove hashibot (#11053)
* Replace `closed_issue_locker` HashiBot action with GitHub action

Related to: #11043

* Replace  with GitHub action

* Replace  with GitHub action
2021-05-27 12:58:58 -04:00