Skip to content

Commit 6edf4b5

Browse files
scottschreckengaustscottschreckengaust
authored
Merge branch 'main' into issue-72-audit-unit-context
2 parents 8483032 + 5c33ae7 commit 6edf4b5

10 files changed

Lines changed: 235 additions & 97 deletions

File tree

‎.github/workflows/ci.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
permissions:
2121
contents: read
2222
steps:
23-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 #v6.0.1
23+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
2424
- uses: DavidAnson/markdownlint-cli2-action@ce4853d43830c74c1753b39f3cf40f71c2031eb9 #v23.0.0
2525
with:
2626
globs: "**/*.md"

‎.github/workflows/codebuild.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -134,7 +134,7 @@ jobs:
134134
135135
- name: Check cache
136136
id: cache-check
137-
uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
137+
uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
138138
with:
139139
path: ${{ env.CODEBUILD_PROJECT_NAME }}.zip
140140
key: ${{ env.CODEBUILD_PROJECT_NAME }}-${{ github.ref_name }}-${{ github.sha }}
@@ -143,7 +143,7 @@ jobs:
143143
- name: Configure AWS credentials
144144
# env.ACT is set by the 'act' CLI tool for local testing
145145
if: ${{ !env.ACT && steps.cache-check.outputs.cache-hit != 'true' }}
146-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v6.0.0
146+
uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
147147
with:
148148
role-to-assume: ${{ secrets.AWS_CODEBUILD_ROLE_ARN }}
149149
aws-region: ${{ vars.AWS_REGION || 'us-east-1' }}
@@ -389,15 +389,15 @@ jobs:
389389
390390
- name: Save report to cache
391391
if: steps.cache-check.outputs.cache-hit != 'true'
392-
uses: actions/cache/save@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
392+
uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
393393
with:
394394
path: ${{ github.workspace }}/.codebuild/downloads/${{ env.CODEBUILD_PROJECT_NAME }}.zip
395395
key: ${{ env.CODEBUILD_PROJECT_NAME }}-${{ github.ref_name }}-${{ github.sha }}
396396

397397
- name: Upload CodeBuild primary artifact
398398
# env.ACT is set by the 'act' CLI tool for local testing
399399
if: ${{ !env.ACT }}
400-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
400+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
401401
with:
402402
name: ${{ env.CODEBUILD_PROJECT_NAME }}.zip
403403
path: ${{ github.workspace }}/.codebuild/downloads/${{ env.CODEBUILD_PROJECT_NAME }}.zip
@@ -407,7 +407,7 @@ jobs:
407407
- name: Upload Evaluation Report
408408
# env.ACT is set by the 'act' CLI tool for local testing
409409
if: ${{ !env.ACT }}
410-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
410+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
411411
with:
412412
name: evaluation.zip
413413
path: ${{ github.workspace }}/.codebuild/downloads/evaluation.zip
@@ -417,7 +417,7 @@ jobs:
417417
- name: Upload Trend Report
418418
# env.ACT is set by the 'act' CLI tool for local testing
419419
if: ${{ !env.ACT }}
420-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
420+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
421421
with:
422422
name: trend.zip
423423
path: ${{ github.workspace }}/.codebuild/downloads/trend.zip
@@ -454,7 +454,7 @@ jobs:
454454
- name: Upload Report Bundle
455455
# env.ACT is set by the 'act' CLI tool for local testing
456456
if: ${{ !env.ACT }}
457-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
457+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
458458
with:
459459
name: >-
460460
${{ github.event_name == 'pull_request'

‎.github/workflows/pull-request-lint.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -174,7 +174,7 @@ jobs:
174174
HELP: Contributor statement missing from PR description. Please include the following text in the PR description
175175
if: (github.event_name == 'pull_request' || github.event_name == 'pull_request_target') && !(github.event.pull_request.user.login == 'aidlc-workflows' || github.event.pull_request.user.login == 'dependabot[bot]' || github.event.pull_request.user.login == 'github-actions' || github.event.pull_request.user.login == 'github-actions[bot]')
176176
steps:
177-
- uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd #v8.0.0
177+
- uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 #v9.0.0
178178
with:
179179
script: |-
180180
const actual = process.env.PR_BODY.replace(/\r?\n/g, "\n");

‎.github/workflows/release-pr.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -33,12 +33,12 @@ jobs:
3333
runs-on: ubuntu-latest
3434
steps:
3535
- name: Checkout code
36-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
36+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3737
with:
3838
fetch-depth: 0
3939

4040
- name: Install git-cliff
41-
uses: orhun/git-cliff-action@e16f179f0be49ecdfe63753837f20b9531642772 # v4.7.0
41+
uses: orhun/git-cliff-action@c93ef52f3d0ddcdcc9bd5447d98d458a11cd4f72 # v4.7.1
4242
with:
4343
config: cliff.toml
4444
args: --version
@@ -93,7 +93,7 @@ jobs:
9393
fi
9494
9595
- name: Generate changelog
96-
uses: orhun/git-cliff-action@e16f179f0be49ecdfe63753837f20b9531642772 # v4.7.0
96+
uses: orhun/git-cliff-action@c93ef52f3d0ddcdcc9bd5447d98d458a11cd4f72 # v4.7.1
9797
with:
9898
config: cliff.toml
9999
args: --tag ${{ steps.version.outputs.tag }}

‎.github/workflows/release.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ jobs:
3434

3535
steps:
3636
- name: Checkout code
37-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
37+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3838
with:
3939
fetch-depth: 0
4040

@@ -58,7 +58,7 @@ jobs:
5858
5959
- name: Create GitHub Release
6060
if: steps.version.outputs.skip != 'true'
61-
uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
61+
uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
6262
with:
6363
tag_name: ${{ steps.version.outputs.tag }}
6464
draft: true

‎.github/workflows/security-scanners.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ jobs:
4646
set -e
4747
echo "exit_code=$GITLEAKS_EXIT" >> "$GITHUB_OUTPUT"
4848
exit 0
49-
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
49+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
5050
if: always()
5151
with:
5252
name: gitleaks.sarif
@@ -141,7 +141,7 @@ jobs:
141141
else
142142
echo "exit_code=0" >> "$GITHUB_OUTPUT"
143143
fi
144-
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
144+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
145145
with:
146146
name: semgrep.sarif
147147
path: semgrep-report_sarif.json
@@ -177,7 +177,7 @@ jobs:
177177
set -e
178178
echo "exit_code=$GRYPE_EXIT" >> "$GITHUB_OUTPUT"
179179
exit 0
180-
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
180+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
181181
if: always()
182182
with:
183183
name: grype.sarif
@@ -227,7 +227,7 @@ jobs:
227227
echo "exit_code=0" >> "$GITHUB_OUTPUT"
228228
fi
229229
exit 0
230-
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
230+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
231231
if: always()
232232
with:
233233
name: bandit.sarif
@@ -280,7 +280,7 @@ jobs:
280280
else
281281
echo "exit_code=0" >> "$GITHUB_OUTPUT"
282282
fi
283-
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
283+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
284284
if: always()
285285
with:
286286
name: checkov.sarif
@@ -336,7 +336,7 @@ jobs:
336336
set -e
337337
echo "exit_code=$CLAMAV_EXIT" >> "$GITHUB_OUTPUT"
338338
exit 0
339-
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
339+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
340340
if: always()
341341
with:
342342
name: clamdscan.txt

‎.github/workflows/tag-on-merge.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
runs-on: ubuntu-latest
3131
steps:
3232
- name: Checkout code
33-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
33+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3434
with:
3535
fetch-depth: 1
3636
- name: Create tag

‎.pre-commit-config.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
repos:
22
- repo: https://github.com/DavidAnson/markdownlint-cli2
3-
rev: v0.22.0
3+
rev: v0.22.1
44
hooks:
55
- id: markdownlint-cli2

‎scripts/aidlc-evaluator/pyproject.toml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ description = "Evaluation and reporting framework for AI-DLC workflows"
55
requires-python = ">=3.13"
66
dependencies = [
77
"pyyaml>=6.0",
8-
"boto3>=1.42.47",
8+
"boto3>=1.42.94",
99
"aidlc-runner",
1010
"aidlc-qualitative",
1111
"aidlc-quantitative",
@@ -44,9 +44,9 @@ aidlc-trend-reports = { workspace = true }
4444
dev = [
4545
"pytest>=9.0.3",
4646
"pytest-asyncio>=0.23.0",
47-
"ruff>=0.3.0",
48-
"bandit>=1.7.0",
49-
"semgrep>=1.0.0",
47+
"ruff>=0.15.11",
48+
"bandit>=1.9.4",
49+
"semgrep>=1.161.0",
5050
]
5151

5252
[tool.ruff]

0 commit comments

Comments
 (0)