Skip to content

Security: TimSchoenle/actions

SECURITY.md

Security Policy

Supported Versions

Any version not listed in the following tables is not supported.

Actions

Bun

Component Version Supported
Bun Setup-cached actions-bun-setup-cached-v1.1.3

Common

Component Version Supported
Commit Changes actions-common-commit-changes-v1.1.1
Common Modify YAML actions-common-modify-yaml-v1.2.0
Common Read YAML actions-common-read-yaml-v1.1.0
Get App Git Identity actions-common-get-app-git-identity-v1.1.0
Setup App Git Identity actions-common-setup-app-git-identity-v1.1.0

Helm

Component Version Supported
Update Helm Chart Version actions-helm-update-chart-version-v1.4.4

Helper

Component Version Supported
Verify Commit Authors actions-helper-verify-commit-authors-v1.1.3

Workflows

Common

Component Version Supported
Common Test Workflow21345 workflows-common-test2-v2.11.1

Maintenance

Component Version Supported
Auto Format workflows-maintenance-auto-bun-prettier-v1.1.7
Auto-Approve & Merge Timed PRs workflows-maintenance-timed-auto-pr-approve-v1.2.7
Maintenance Auto-approve-renovate workflows-maintenance-auto-approve-renovate-v1.2.5

Rust

Component Version Supported
Rust Auto-format workflows-rust-auto-format-v1.1.1
Rust Cargo Check workflows-rust-cargo-check-v1.1.3
Rust Clippy workflows-rust-clippy-v1.1.1
Rust Coverage (Codecov) workflows-rust-coverage-codecov-v1.0.1
Rust Test workflows-rust-test-v1.0.1

Reporting a Vulnerability

We accept vulnerability reports via GitHub's Private Vulnerability Reporting feature.

  1. Go to the Security tab of this repository.
  2. Click on Report a vulnerability to open a private advisory.
  3. Provide details of the vulnerability.

This ensures that the report is handled securely and privately. Valid reports will be investigated and addressed as soon as possible.

Security Measures

This repository employs several automated security measures to ensure the integrity and safety of the code:

  • CodeQL Analysis: Automated vulnerability scanning is run on every push and pull request.
  • Dependency Updates: Renovate is used to keep dependencies up-to-date and secure.
  • Action Linting: zizmor is used to lint GitHub Actions workflows for security issues.
  • Branch Protection: Main branch is protected and requires passing status checks before merging.

Supply Chain Security

  • Protected Tags: All Git tags are immutable and protected. They can only be created through our automated release CI process.

There aren’t any published security advisories