From 3d7a0094e34d9e574313b5daa5f368aa9c919f56 Mon Sep 17 00:00:00 2001 From: StepSecurity Bot Date: Wed, 13 Nov 2024 14:44:30 +0000 Subject: [PATCH] [StepSecurity] Apply security best practices Signed-off-by: StepSecurity Bot --- .github/dependabot.yml | 5 +++++ .github/workflows/codeql.yml | 3 +++ .pre-commit-config.yaml | 14 ++++++++++++++ 3 files changed, 22 insertions(+) create mode 100644 .pre-commit-config.yaml diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 253bcb7..bb85b6f 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,3 +4,8 @@ updates: directory: / schedule: interval: daily + + - package-ecosystem: npm + directory: / + schedule: + interval: daily diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 4dd715f..dfa4a93 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -9,6 +9,9 @@ on: schedule: - cron: '33 1 * * 2' # Run at 1:33 on Tuesdays +permissions: + contents: read + jobs: analyze: name: Analyze (${{ matrix.language }}) diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml new file mode 100644 index 0000000..bf6722e --- /dev/null +++ b/.pre-commit-config.yaml @@ -0,0 +1,14 @@ +repos: +- repo: https://github.com/gitleaks/gitleaks + rev: v8.16.3 + hooks: + - id: gitleaks +- repo: https://github.com/pocc/pre-commit-hooks + rev: v1.3.5 + hooks: + - id: cpplint +- repo: https://github.com/pre-commit/pre-commit-hooks + rev: v4.4.0 + hooks: + - id: end-of-file-fixer + - id: trailing-whitespace