6 Commits

Author SHA1 Message Date
Patrick Ellis
1dbfe1ba55 Merge pull request #276 from actions/releases/v1.1.1
Update package.json version to v1.2.0
2023-09-27 15:48:35 -04:00
Patrick Ellis
15b3c5fd4d 1.2.0 2023-09-27 15:28:33 -04:00
Patrick Ellis
75f2492c00 Merge pull request #275 from actions/pje/upgrade-codeql-actions-to-v2
Upgrade codeql actions to v2
2023-09-27 15:27:00 -04:00
Patrick Ellis
cc18bea05f Upgrade codeql actions to v2
Currently we're using v1, and there have been some important changes since then.

In particular, the latest version, v2.14.4, contains an important security patch:

> The CodeQL CLI no longer supports the `SEMMLE_JAVA_ARGS` environment variable. All previous versions of the CodeQL CLI perform command substitution on the `SEMMLE_JAVA_ARGS` value (for example, replacing `'$(echo foo)'` with `'foo'`) when starting a new Java virtual machine, which, depending on the execution environment, may have security implications. Users are advised to check their environments for possible `SEMMLE_JAVA_ARGS` misuse.

See the [codeql-action release notes](https://github.com/github/codeql-cli-binaries/releases/tag/v2.14.4) for full details.
2023-09-27 15:11:26 -04:00
Cory Miller
64bdb23066 Merge pull request #105 from actions/users/cory-miller/add-first-interaction
Use first-interaction in the repository
2022-10-06 14:39:13 -04:00
Cory Miller
ba7d609515 Use first-interaction in the repository 2022-10-06 14:08:49 -04:00
3 changed files with 31 additions and 4 deletions

View File

@@ -42,7 +42,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@v1
uses: github/codeql-action/init@v2
with:
languages: ${{ matrix.language }}
source-root: src
@@ -54,7 +54,7 @@ jobs:
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
# If this step fails, then you should remove it and run the build manually (see below)
- name: Autobuild
uses: github/codeql-action/autobuild@v1
uses: github/codeql-action/autobuild@v2
# Command-line programs to run using the OS shell.
# 📚 https://git.io/JvXDl
@@ -68,4 +68,4 @@ jobs:
# make release
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v1
uses: github/codeql-action/analyze@v2

27
.github/workflows/first-interaction.yml vendored Normal file
View File

@@ -0,0 +1,27 @@
name: first-interaction
on:
issues:
types: [opened]
pull_request:
branches: [main]
types: [opened]
jobs:
check_for_first_interaction:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- uses: actions/first-interaction@main
with:
repo-token: ${{ secrets.GITHUB_TOKEN }}
issue-message: |
Hello! Thank you for filing an issue.
If this is a bug report, please include relevant logs to help us debug the problem.
pr-message: |
Hello! Thank you for your contribution.
If you are fixing a bug, please reference the issue number in the description.
If you are implementing a feature request, please check with the maintainers that the feature will be accepted first.

View File

@@ -1,6 +1,6 @@
{
"name": "first-interaction-action",
"version": "1.1.1",
"version": "1.2.0",
"description": "An action for greeting first time contributors.",
"main": "lib/main.js",
"scripts": {