From a4b8c2c0c6aeeff28a77c983679f086c07891e33 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=F0=9D=93=9C=F0=9D=93=AE=F0=9D=93=B5=F0=9D=93=AE?= =?UTF-8?q?=F0=9D=93=B4=20=F0=9D=93=A2=F0=9D=93=AA=F0=9D=93=AB=F0=9D=93=B2?= =?UTF-8?q?=F0=9D=93=BD?= <32045473+meleksabit@users.noreply.github.com> Date: Mon, 2 Jun 2025 03:09:13 +0300 Subject: [PATCH 1/3] docs: edit README (#59) * add devsecops_pipeline.py * add devsecops-pipeline workflow * replace sonarqube with bandit * edit cron job * add comment for the cron job * add Git Guardian workflow * edit Git Guardian workflow * edit Git Guardian workflow * edit Git Guardian workflow * edit Git Guardian workflow * edit Git Guardian workflow * edit Git Guardian workflow * edit Git Guardian workflow * edit Git Guardian workflow * edit Git Guardian workflow * edit README file * edit DevSecOps pipeline * edit release badge * add .gitignore file * add PR Title Linter * add status badge for PR Linter * add SonarCloud implementation * edit sonar-project.properties * add SonarCloud badge * address suggestions from SonarCloud * add secrets module in strong_passgen_for_prod.py * edit strong_passgen_for_prod.py * edit strong_passgen_for_prod.py * edit strong_passgen_for_prod.py * edit strong_passgen_for_prod.py * edit strong_passgen_for_prod.py * edit strong_passgen_for_prod.py * edit strong_passgen_for_prod.py * edit strong_passgen_for_prod.py * edit crypto_passgen_for_prod.py script * docs: add Sonar Cloud status badges * docs: edit status badges * docs: edit status badges * edit gitignore * edit README --- README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 30a75c6..31a527c 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,5 @@ -# $\color{Cerulean}{Python\}$ $\color{Goldenrod}{Examples\}$ +# ![Python](https://img.shields.io/badge/Python-Examples-yellow?style=for-the-badge&labelColor=blue&logo=python&logoColor=white) +
SonarQube Cloud From 9a2d63d147001e50c46c872763b4410e31d30b1a Mon Sep 17 00:00:00 2001 From: meleksabit Date: Sun, 5 Apr 2026 03:15:10 +0300 Subject: [PATCH 2/3] update version of CodeQL Action --- .github/workflows/codeql.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index cddd97a..a49282f 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -55,11 +55,11 @@ jobs: # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v6.0.2 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v3 + uses: github/codeql-action/init@v4.35.1 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -87,6 +87,6 @@ jobs: exit 1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 + uses: github/codeql-action/analyze@v4.35.1 with: category: "/language:${{matrix.language}}" From 34c4228f8e23d87103380a20769524457926aae3 Mon Sep 17 00:00:00 2001 From: meleksabit Date: Sun, 5 Apr 2026 03:29:09 +0300 Subject: [PATCH 3/3] update version of CodeQL Action --- .github/workflows/sonarcloud.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml index 122d834..46427bb 100644 --- a/.github/workflows/sonarcloud.yml +++ b/.github/workflows/sonarcloud.yml @@ -15,16 +15,16 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v4.35.1 - - name: Set up JDK 17 - uses: actions/setup-java@v4 + - name: Set up JDK 21 + uses: actions/setup-java@v5.2.0 with: java-version: '17' distribution: 'temurin' java-package: 'jdk' - name: SonarCloud Scan - uses: sonarsource/sonarcloud-github-action@v3 # Ex: v2.1.0, See the latest version at https://github.com/marketplace/actions/sonarcloud-scan + uses: sonarsource/sonarcloud-github-action@v7.1.0 # Ex: v2.1.0, See the latest version at https://github.com/marketplace/actions/sonarcloud-scan env: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}