Skip to content

Commit 18ffd93

Browse files
dangerangerdangeranger
committed
initial commit
0 parents  commit 18ffd93

48 files changed

Lines changed: 6867 additions & 0 deletions

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.github/dependabot.yml‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
version: 2
2+
updates:
3+
- package-ecosystem: "uv"
4+
directory: "/"
5+
schedule:
6+
interval: "weekly"
7+
8+
- package-ecosystem: "github-actions"
9+
directory: "/"
10+
schedule:
11+
interval: "weekly"

‎.github/workflows/ci.yml‎

Lines changed: 53 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
name: CI
2+
3+
on:
4+
pull_request:
5+
push:
6+
branches:
7+
- main
8+
- master
9+
10+
permissions:
11+
contents: read
12+
13+
env:
14+
UV_PYTHON: "3.11.14"
15+
16+
concurrency:
17+
group: ${{ github.workflow }}-${{ github.ref }}
18+
cancel-in-progress: true
19+
20+
jobs:
21+
quality:
22+
name: Quality gate
23+
runs-on: ubuntu-24.04
24+
25+
steps:
26+
- name: Harden Runner
27+
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
28+
with:
29+
egress-policy: audit
30+
31+
- name: Check out repository
32+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
33+
34+
- name: Install uv
35+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
36+
with:
37+
version: "0.9.7"
38+
enable-cache: true
39+
cache-dependency-glob: uv.lock
40+
41+
- name: Install Python
42+
run: uv python install 3.11.14
43+
44+
- name: Install just
45+
uses: taiki-e/install-action@7769b73c2ec98c38dfcf2e18c83cfd4880c038c1 # v2
46+
with:
47+
tool: just@1.50.0
48+
49+
- name: Sync dependencies
50+
run: uv sync --locked
51+
52+
- name: Run quality gate
53+
run: just check

‎.github/workflows/codeql.yml‎

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
name: CodeQL
2+
3+
on:
4+
pull_request:
5+
push:
6+
branches:
7+
- main
8+
- master
9+
schedule:
10+
- cron: "17 4 * * 1"
11+
12+
permissions:
13+
actions: read
14+
contents: read
15+
security-events: write
16+
17+
concurrency:
18+
group: ${{ github.workflow }}-${{ github.ref }}
19+
cancel-in-progress: true
20+
21+
jobs:
22+
analyze:
23+
name: Analyze
24+
runs-on: ubuntu-24.04
25+
26+
steps:
27+
- name: Harden Runner
28+
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
29+
with:
30+
egress-policy: audit
31+
32+
- name: Check out repository
33+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
34+
35+
- name: Initialize CodeQL
36+
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
37+
with:
38+
languages: python
39+
40+
- name: Perform CodeQL analysis
41+
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4

‎.github/workflows/dependency-review.yml‎

Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
name: Dependency Review
2+
3+
on:
4+
pull_request:
5+
6+
permissions:
7+
contents: read
8+
pull-requests: read
9+
10+
concurrency:
11+
group: ${{ github.workflow }}-${{ github.ref }}
12+
cancel-in-progress: true
13+
14+
jobs:
15+
dependency-review:
16+
name: Dependency Review
17+
runs-on: ubuntu-24.04
18+
19+
steps:
20+
- name: Harden Runner
21+
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
22+
with:
23+
egress-policy: audit
24+
25+
- name: Review dependency changes
26+
uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4.9.0

‎.github/workflows/scorecard.yml‎

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
name: OpenSSF Scorecard
2+
3+
on:
4+
push:
5+
branches:
6+
- main
7+
- master
8+
schedule:
9+
- cron: "43 4 * * 1"
10+
11+
permissions: {}
12+
13+
concurrency:
14+
group: ${{ github.workflow }}-${{ github.ref }}
15+
cancel-in-progress: true
16+
17+
jobs:
18+
analysis:
19+
name: Scorecard
20+
runs-on: ubuntu-24.04
21+
permissions:
22+
actions: read
23+
checks: read
24+
contents: read
25+
id-token: write
26+
pull-requests: read
27+
security-events: write
28+
29+
steps:
30+
- name: Harden Runner
31+
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
32+
with:
33+
egress-policy: audit
34+
35+
- name: Check out repository
36+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
37+
38+
- name: Run OpenSSF Scorecard
39+
uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
40+
with:
41+
results_file: results.sarif
42+
results_format: sarif
43+
publish_results: true
44+
45+
- name: Upload Scorecard SARIF
46+
uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
47+
with:
48+
sarif_file: results.sarif

0 commit comments

Comments
 (0)