Skip to content

feat(git): Add security and workflow enhancements - #5

Merged
Arc-E-Tect merged 7 commits into
mainfrom
hardening-of-github
Apr 20, 2026
Merged

feat(git): Add security and workflow enhancements#5
Arc-E-Tect merged 7 commits into
mainfrom
hardening-of-github

Conversation

@Arc-E-Tect

Copy link
Copy Markdown
Owner

Summary of Changes

  • Added dependabot.yml configuration to automate dependency updates for GitHub Actions, Gradle, and npm.
  • Introduced SECURITY.md to outline vulnerability reporting procedures and security practices.
  • Added CODEOWNERS file to enforce repository approval processes.
  • Pinned GitHub Action references to specific commit SHAs for improved reliability and security.
  • Disabled Node Audit Analyzer in OWASP dependency checks to prevent false positives.
  • Updated workflow configuration to include the maintenance branch in push triggers.

@Arc-E-Tect Arc-E-Tect self-assigned this Apr 20, 2026
@Arc-E-Tect Arc-E-Tect added the enhancement New feature or request label Apr 20, 2026
# Conflicts:
#	.github/workflows/jacoco-exclusion-report-build.yml
#	.github/workflows/jacoco-exclusion-report-release.yml
#	.github/workflows/security-scan.yml
@Arc-E-Tect
Arc-E-Tect merged commit a88ffbe into main Apr 20, 2026
4 checks passed
@Arc-E-Tect
Arc-E-Tect deleted the hardening-of-github branch April 20, 2026 07:16
Arc-E-Tect added a commit that referenced this pull request Apr 20, 2026
# [0.1.0](v0.0.1...v0.1.0) (2026-04-20)

### ✨ New and updated features

* **git:** Add security and workflow enhancements ([#5](#5)) ([a88ffbe](a88ffbe)), closes [#5](#5)
* **workflow:** Enhance repository security and workflow reliability ([#10](#10)) ([2fb7c13](2fb7c13)), closes [#10](#10)
@Arc-E-Tect

Copy link
Copy Markdown
Owner Author

🎉 This PR is included in version 0.1.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request released

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant