Skip to content

main Java #1783

Open
gniumg-source wants to merge 108 commits intogoogleworkspace:mainfrom
gniumg-source:main
Open

main Java #1783
gniumg-source wants to merge 108 commits intogoogleworkspace:mainfrom
gniumg-source:main

Conversation

@gniumg-source
Copy link
Copy Markdown

Description

Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context.
List any dependencies that are required for this change.

Fixes # (issue)

Is it been tested?

  • [• ] Development testing done

Checklist

  • [ •] My code follows the style guidelines of this project
  • [ •] I have performed a self-review of my own code
  • [ •] I have performed a peer-reviewed with team member(s)
  • [• ] I have commented my code, particularly in hard-to-understand areas
  • [ •] I have made corresponding changes to the documentation
  • [• ] My changes generate no new warnings
  • [ •] Any dependent changes have been merged and published in downstream modules

This workflow generates SLSA provenance files for projects, satisfying level 3 requirements. It includes steps for building artifacts and generating subjects for provenance.
@gniumg-source
Added funding model options for various platforms. 
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
Added supported funding model platforms with placeholders for usernames.
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
Added comprehensive information about secret scanning, its benefits, and how to access the feature for different repository types.
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
This workflow builds and deploys a Jekyll site to GitHub Pages, with steps for checkout, setup, build, and deployment
@gniumg-source  

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
This workflow integrates Appknox for mobile application security testing, including build and upload steps.
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
This workflow integrates Bearer for code scanning and uploads SARIF results.
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
This workflow integrates Black Duck Security Action for Static Analysis Security Testing (SAST) and Software Composition Analysis (SCA) in CI/CD pipelines.
 @gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
This workflow triggers Checkmarx One scans on pull requests to the main branch, integrating SAST, SCA, and KICS functionalities.
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
This workflow integrates Codacy Actions 
y scans with GitHub Actions
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
This workflow initiates a Contrast Scan on built artifacts and uploads results in SARIF format to GitHub. It includes necessary prerequisites and permissions for scanning and uploading.
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
This workflow performs static analysis of source code using Red Hat CodeReady Dependency Analytics, triggered by various events.
 @gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
This workflow integrates Debricked for vulnerability scanning in GitHub actions.
 @gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
This workflow configures Endor Labs scanning for pull requests and pushes, including SARIF file uploads.
 @gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
This workflow integrates Fortify Application Security Testing into GitHub workflows, enabling SAST and SCA scans.
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
Fix indentation for the Apache License header.
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
Added a blank line for better readability.
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
Added documentation for working with the Container Registry, including authentication, image management, and best practices.
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
Add GitHub Packages npm registry configuration and usage instructions.
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
This workflow integrates EthicalCheck for automated API security testing, including triggers for push and pull requests on the main branch, and a scheduled run.
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
gniumg-source and others added 21 commits April 10, 2026 09:47
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
Bumps [com.google.oauth-client:google-oauth-client-jetty](https://github.com/googleapis/google-oauth-java-client) from 1.34.1 to 1.39.0.
- [Release notes](https://github.com/googleapis/google-oauth-java-client/releases)
- [Changelog](https://github.com/googleapis/google-oauth-java-client/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-oauth-java-client@v1.34.1...v1.39.0)

---
updated-dependencies:
- dependency-name: com.google.oauth-client:google-oauth-client-jetty
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
Bumps [com.google.oauth-client:google-oauth-client-jetty](https://github.com/googleapis/google-oauth-java-client) from 1.34.1 to 1.39.0.
- [Release notes](https://github.com/googleapis/google-oauth-java-client/releases)
- [Changelog](https://github.com/googleapis/google-oauth-java-client/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-oauth-java-client@v1.34.1...v1.39.0)

---
updated-dependencies:
- dependency-name: com.google.oauth-client:google-oauth-client-jetty
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [com.google.oauth-client:google-oauth-client-jetty](https://github.com/googleapis/google-oauth-java-client) from 1.34.1 to 1.39.0.
- [Release notes](https://github.com/googleapis/google-oauth-java-client/releases)
- [Changelog](https://github.com/googleapis/google-oauth-java-client/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-oauth-java-client@v1.34.1...v1.39.0)

---
updated-dependencies:
- dependency-name: com.google.oauth-client:google-oauth-client-jetty
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
…ckstart/com.google.oauth-client-google-oauth-client-jetty-1.39.0

chore(deps): bump com.google.oauth-client:google-oauth-client-jetty from 1.34.1 to 1.39.0 in /vault/quickstart
Added guidelines for submitting patches and tutorials, including Contributor License Agreements and pull request instructions.
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
…ckstart/com.google.oauth-client-google-oauth-client-jetty-1.39.0

chore(deps): bump com.google.oauth-client:google-oauth-client-jetty from 1.34.1 to 1.39.0 in /gmail/quickstart
Added Contributor License Agreements section with submission guidelines.
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
Bumps the github_actions group with 1 update in the /.github/workflows directory: [gradle/gradle-build-action](https://github.com/gradle/gradle-build-action).


Updates `gradle/gradle-build-action` from 2.1.1 to 2.4.2
- [Release notes](https://github.com/gradle/gradle-build-action/releases)
- [Commits](gradle/gradle-build-action@v2.1.1...v2.4.2)

---
updated-dependencies:
- dependency-name: gradle/gradle-build-action
  dependency-version: 2.4.2
  dependency-type: direct:production
  dependency-group: github_actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@gniumg-source 

Signed-off-by: Gregg Juan Eduardo Palomo Herrera <gniumg@gmail.com>
…ot-github/workflows/github_actions-e0be72456f

chore(deps): bump gradle/gradle-build-action from 2.1.1 to 2.4.2 in /.github/workflows in the github_actions group across 1 directory
@gniumg-source gniumg-source requested a review from a team as a code owner April 13, 2026 11:49
Copy link
Copy Markdown
Author

@gniumg-source gniumg-source left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@gniumg-source #1783
@dependabot #1781
@tjohns #1780
@sqrrrl #1781
@asrivas #1776

gh pr checkout 1783
.github/ISSUE_TEMPLATE/bug_report.md

…kstart/com.google.oauth-client-google-oauth-client-jetty-1.39.0

chore(deps): bump com.google.oauth-client:google-oauth-client-jetty from 1.34.1 to 1.39.0 in /tasks/quickstart
@gniumg-source 

Signed-off-by: Rhe DC-HG Gnium  <gniumg@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant