From 1e5d0b171f166f984133a2e14955039c4814b17d Mon Sep 17 00:00:00 2001 From: Mark Cheret Date: Tue, 20 Apr 2021 03:28:19 +0200 Subject: [PATCH 1/8] security: add snyk --- .github/workflows/snyk.yml | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 .github/workflows/snyk.yml diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml new file mode 100644 index 0000000..ad3523b --- /dev/null +++ b/.github/workflows/snyk.yml @@ -0,0 +1,11 @@ +name: Example workflow for PHP using Snyk +on: push +jobs: + security: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@master + - name: Run Snyk to check for vulnerabilities + uses: snyk/actions/php@master + env: + SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} \ No newline at end of file From f0503cceaf97fc83fd617a4a3ab117fb5ac35fea Mon Sep 17 00:00:00 2001 From: Mark Cheret Date: Tue, 20 Apr 2021 03:30:57 +0200 Subject: [PATCH 2/8] updated snyk workflow --- .github/workflows/snyk.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml index ad3523b..a0f8ce4 100644 --- a/.github/workflows/snyk.yml +++ b/.github/workflows/snyk.yml @@ -1,4 +1,4 @@ -name: Example workflow for PHP using Snyk +name: Snyk on: push jobs: security: From ec462f1a7b1b8bb892481dca80f813e8bd6da798 Mon Sep 17 00:00:00 2001 From: Mark Cheret Date: Tue, 20 Apr 2021 03:36:29 +0200 Subject: [PATCH 3/8] update snyk.yml --- .github/workflows/snyk.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml index a0f8ce4..4dad04e 100644 --- a/.github/workflows/snyk.yml +++ b/.github/workflows/snyk.yml @@ -8,4 +8,6 @@ jobs: - name: Run Snyk to check for vulnerabilities uses: snyk/actions/php@master env: - SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} \ No newline at end of file + SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} + with: + args: --all-projects \ No newline at end of file From 687c07da93c2fa38cc6f90d5b271595583a64d92 Mon Sep 17 00:00:00 2001 From: Mark Cheret Date: Tue, 20 Apr 2021 03:48:16 +0200 Subject: [PATCH 4/8] added license info in package --- package.json | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index d3582a6..8c7c9ec 100644 --- a/package.json +++ b/package.json @@ -19,5 +19,6 @@ "prettier": "^2.2.1", "stylelint": "^13.12.0", "stylelint-config-wordpress": "^17.0.0" - } -} + }, + "license": "GPL-3.0" +} \ No newline at end of file From a5b86ec20ca09fe4fd03792130525382d6311fde Mon Sep 17 00:00:00 2001 From: Mark Cheret Date: Tue, 20 Apr 2021 03:59:19 +0200 Subject: [PATCH 5/8] update snyk.ymk --- .github/workflows/snyk.yml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml index 4dad04e..3480080 100644 --- a/.github/workflows/snyk.yml +++ b/.github/workflows/snyk.yml @@ -10,4 +10,10 @@ jobs: env: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} with: - args: --all-projects \ No newline at end of file + args: --all-projects + - name: Snyk monitor + run: snyk test + env: + SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} + with: + command: monitor \ No newline at end of file From 6cb765cb5a15ea51b327ec57eca8cc3d9ce0a91c Mon Sep 17 00:00:00 2001 From: Mark Cheret Date: Tue, 20 Apr 2021 04:05:00 +0200 Subject: [PATCH 6/8] updated settings on snyk.io --- .github/workflows/snyk.yml | 32 +++++++++++++------------------- 1 file changed, 13 insertions(+), 19 deletions(-) diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml index 3480080..bfdebaf 100644 --- a/.github/workflows/snyk.yml +++ b/.github/workflows/snyk.yml @@ -1,19 +1,13 @@ -name: Snyk -on: push -jobs: - security: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@master - - name: Run Snyk to check for vulnerabilities - uses: snyk/actions/php@master - env: - SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} - with: - args: --all-projects - - name: Snyk monitor - run: snyk test - env: - SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} - with: - command: monitor \ No newline at end of file +# name: Snyk +# on: push +# jobs: +# security: +# runs-on: ubuntu-latest +# steps: +# - uses: actions/checkout@master +# - name: Run Snyk to check for vulnerabilities +# uses: snyk/actions/php@master +# env: +# SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} +# with: +# args: --all-projects \ No newline at end of file From b5af559ff478bc7de1a6b18c90605adcac2d6d5a Mon Sep 17 00:00:00 2001 From: Mark Cheret Date: Tue, 20 Apr 2021 04:07:08 +0200 Subject: [PATCH 7/8] activate specific push action --- .github/workflows/snyk.yml | 26 +++++++++++++------------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml index bfdebaf..4dad04e 100644 --- a/.github/workflows/snyk.yml +++ b/.github/workflows/snyk.yml @@ -1,13 +1,13 @@ -# name: Snyk -# on: push -# jobs: -# security: -# runs-on: ubuntu-latest -# steps: -# - uses: actions/checkout@master -# - name: Run Snyk to check for vulnerabilities -# uses: snyk/actions/php@master -# env: -# SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} -# with: -# args: --all-projects \ No newline at end of file +name: Snyk +on: push +jobs: + security: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@master + - name: Run Snyk to check for vulnerabilities + uses: snyk/actions/php@master + env: + SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} + with: + args: --all-projects \ No newline at end of file From 70fdc9dcbd9e0cb0afc6437b7c707e1391460d04 Mon Sep 17 00:00:00 2001 From: Mark Cheret Date: Tue, 20 Apr 2021 04:21:37 +0200 Subject: [PATCH 8/8] doc: add snyk shield --- README.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 422c9b9..8e13399 100644 --- a/README.md +++ b/README.md @@ -1,13 +1,13 @@ +# footnotes + ![stable tag](https://img.shields.io/wordpress/plugin/v/footnotes?style=flat-square) ![WP rating](https://img.shields.io/wordpress/plugin/stars/footnotes?style=flat-square) ![Reqd PHP](https://img.shields.io/wordpress/plugin/required-php/footnotes?style=flat-square) ![Reqd WP](https://img.shields.io/wordpress/plugin/wp-version/footnotes?style=flat-square) ![WordPress Plugin: Tested WP Version](https://img.shields.io/wordpress/plugin/tested/footnotes?style=flat-square) ![GitHub contributors](https://img.shields.io/github/contributors/markcheret/footnotes?style=flat-square) ![GitHub commits since tagged version](https://img.shields.io/github/commits-since/markcheret/footnotes/2.7.0?style=flat-square) ![GitHub commit activity](https://img.shields.io/github/commit-activity/m/markcheret/footnotes?style=flat-square) ![issues](https://img.shields.io/github/issues/markcheret/footnotes?style=flat-square) ![PRs](https://img.shields.io/github/issues-pr/markcheret/footnotes?style=flat-square) -[![OSSAR](https://github.com/markcheret/footnotes/actions/workflows/ossar-analysis.yml/badge.svg)](https://github.com/markcheret/footnotes/actions/workflows/ossar-analysis.yml) [![PHP Composer](https://github.com/markcheret/footnotes/actions/workflows/php.yml/badge.svg)](https://github.com/markcheret/footnotes/actions/workflows/php.yml) [![License: GPL v3](https://img.shields.io/badge/License-GPLv3-blue.svg)](https://www.gnu.org/licenses/gpl-3.0) +[![License: GPL v3](https://img.shields.io/badge/License-GPLv3-blue.svg)](https://www.gnu.org/licenses/gpl-3.0) ![Snyk Vulnerabilities for GitHub Repo](https://img.shields.io/snyk/vulnerabilities/github/markcheret/footnotes?style=flat-square) [![OSSAR](https://github.com/markcheret/footnotes/actions/workflows/ossar-analysis.yml/badge.svg)](https://github.com/markcheret/footnotes/actions/workflows/ossar-analysis.yml) [![PHP Composer](https://github.com/markcheret/footnotes/actions/workflows/php.yml/badge.svg)](https://github.com/markcheret/footnotes/actions/workflows/php.yml) ![footnotes](https://raw.githubusercontent.com/markcheret/footnotes/main/img/footnotes.png) -# footnotes - **footnotes** aims to be the all-in-one solution for displaying an automatically-generated list of references on your Page or Post. The Plugin ships with a set of defaults while also empowering you to control how your