From 567b183143d4581bb0686721347a7e1f50038d66 Mon Sep 17 00:00:00 2001 From: Peter Harrison <16875803+palisadoes@users.noreply.github.com> Date: Sun, 30 Nov 2025 20:11:22 -0500 Subject: [PATCH 1/2] Updated pull-request-target.yml for better security 1764551482 --- .../config/check-pr-issue-skip-usernames.txt | 3 +- .github/workflows/pull-request-target.yml | 43 +++++++++++-------- 2 files changed, 27 insertions(+), 19 deletions(-) diff --git a/.github/workflows/config/check-pr-issue-skip-usernames.txt b/.github/workflows/config/check-pr-issue-skip-usernames.txt index b8862c6..b2e0924 100644 --- a/.github/workflows/config/check-pr-issue-skip-usernames.txt +++ b/.github/workflows/config/check-pr-issue-skip-usernames.txt @@ -1,2 +1,3 @@ +dependabot +noman2002 palisadoes -noman2002 \ No newline at end of file diff --git a/.github/workflows/pull-request-target.yml b/.github/workflows/pull-request-target.yml index aeb3b3f..8646567 100644 --- a/.github/workflows/pull-request-target.yml +++ b/.github/workflows/pull-request-target.yml @@ -32,26 +32,33 @@ jobs: ## Our Pull Request Approval Process This PR will be reviewed according to our: - + 1. [Palisadoes Contributing Guidelines](https://developer.palisadoes.org/docs/contributor-guide/contributing) - + 2. [AI Usage Policy](https://developer.palisadoes.org/docs/contributor-guide/ai) + Your PR may be automatically closed if: + + 1. Our PR template isn't filled in correctly + + 1. [You haven't correctly linked your PR to an issue](https://docs.github.com/en/issues/tracking-your-work-with-issues/using-issues/linking-a-pull-request-to-an-issue) + Thanks for contributing! - # Check-PR-Issue: - # name: Check Correct PR Issue Assignment - # runs-on: ubuntu-latest - # needs: [PR-Greeting] - # steps: - # - uses: actions/checkout@v4 - # - name: Check PR linked issue and assignee - # uses: arkid15r/check-pr-issue-action@f2c2ac3b8c73b5da96294af9ac3ec174098cf513 - # with: - # close_pr_on_failure: 'true' - # github_token: ${{ secrets.GITHUB_TOKEN }} - # no_assignee_message: 'The linked issue must be assigned to the PR author.' - # no_issue_message: 'The PR must be linked to an issue assigned to the PR author.' - # require_assignee: 'true' - # # List of usernames who can create PRs without having an assigned issue - # skip_users_file_path: '.github/workflows/config/check-pr-issue-skip-usernames.txt' + Check-PR-Issue: + name: Check Correct PR Issue Assignment + runs-on: ubuntu-latest + needs: [PR-Greeting] + steps: + - uses: actions/checkout@v4 + - name: Check PR linked issue and assignee + uses: arkid15r/check-pr-issue-action@0.1.3 + with: + close_pr_on_failure: 'true' + github_token: ${{ secrets.GITHUB_TOKEN }} + no_assignee_message: 'The linked issue must be assigned to the PR author.' + no_issue_message: 'The PR must be linked to an issue assigned to the PR author.' + check_issue_reference: 'true' + require_assignee: 'true' + # List of usernames who can create PRs without having an assigned issue + skip_users_file_path: '.github/workflows/config/check-pr-issue-skip-usernames.txt' From cd76b5f71db78db0331566ae112fcdf54bbc939b Mon Sep 17 00:00:00 2001 From: Peter Harrison <16875803+palisadoes@users.noreply.github.com> Date: Sun, 30 Nov 2025 20:24:02 -0500 Subject: [PATCH 2/2] Updated pull-request-target.yml for better security 1764552242 --- .github/dependabot.yaml | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml index 8508943..94378bf 100644 --- a/.github/dependabot.yaml +++ b/.github/dependabot.yaml @@ -2,17 +2,18 @@ version: 2 updates: # Define the target package ecosystem - - package-ecosystem: "npm" + - package-ecosystem: 'npm' # Specify the root directory - directory: "/" - # Schedule automated updates to run weekly + directory: '/' + # Schedule automated updates schedule: - interval: "weekly" + interval: 'cron' + cronjob: '0 0 1 * *' # Labels to apply to Dependabot PRs labels: - - "dependencies" + - 'dependencies' # Specify the target branch for PRs - target-branch: "main" + target-branch: 'main' # Customize commit message prefix commit-message: - prefix: "chore(deps):" + prefix: 'chore(deps):'