Skip to content

Commit 7274148

Browse files
authored
Merge pull request #85 from timoa/develop
Hardening of the HTTP Headers with Helmet + deps updates
2 parents 97eb0fa + 62470c9 commit 7274148

File tree

10 files changed

+1012
-836
lines changed

10 files changed

+1012
-836
lines changed

.github/CODEOWNERS

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
@timoa

.github/workflows/code-review.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ jobs:
1212
steps:
1313

1414
- name: Checkout
15-
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3.0.0
15+
uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748 # tag=v3.0.1
1616

1717
- name: Run hadolint
18-
uses: reviewdog/action-hadolint@v1
18+
uses: reviewdog/action-hadolint@9ab0e438e4266f368e1a782cee6b85a404b2d6a0 # tag=v1.32.1

.github/workflows/codeql-analysis.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -32,19 +32,19 @@ jobs:
3232

3333
steps:
3434
- name: Checkout repository
35-
uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748 # tag=v3
35+
uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748 # tag=v3.0.1
3636

3737
# Initializes the CodeQL tools for scanning.
3838
- name: Initialize CodeQL
39-
uses: github/codeql-action/init@1ed1437484560351c5be56cf73a48a279d116b78 # tag=v2.1.8
39+
uses: github/codeql-action/init@7502d6e991ca767d2db617bfd823a1ed925a0d59 # tag=v2.1.9
4040
# Override language selection by uncommenting this and choosing your languages
4141
# with:
4242
# languages: go, javascript, csharp, python, cpp, java
4343

4444
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
4545
# If this step fails, then you should remove it and run the build manually (see below).
4646
- name: Autobuild
47-
uses: github/codeql-action/autobuild@1ed1437484560351c5be56cf73a48a279d116b78 # tag=v2.1.8
47+
uses: github/codeql-action/autobuild@7502d6e991ca767d2db617bfd823a1ed925a0d59 # tag=v2.1.9
4848

4949
# ℹ️ Command-line programs to run using the OS shell.
5050
# 📚 https://git.io/JvXDl
@@ -58,4 +58,4 @@ jobs:
5858
# make release
5959

6060
- name: Perform CodeQL Analysis
61-
uses: github/codeql-action/analyze@1ed1437484560351c5be56cf73a48a279d116b78 # tag=v2.1.8
61+
uses: github/codeql-action/analyze@7502d6e991ca767d2db617bfd823a1ed925a0d59 # tag=v2.1.9

.github/workflows/nodejs.yml

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -14,10 +14,10 @@ jobs:
1414

1515
steps:
1616
- name: Checkout
17-
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3.0.0
17+
uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748 # tag=v3.0.1
1818

1919
- name: Setup Node.js ${{ matrix.node }}
20-
uses: actions/setup-node@5b52f097d36d4b0b2f94ed6de710023fbb8b2236 # tag=v3.1.0
20+
uses: actions/setup-node@56337c425554a6be30cdef71bf441f15be286854 # tag=v3.1.1
2121
with:
2222
node-version: ${{ matrix.node }}
2323
check-latest: true
@@ -47,7 +47,7 @@ jobs:
4747

4848
steps:
4949
- name: Checkout
50-
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3.0.0
50+
uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748 # tag=v3.0.1
5151

5252
- name: Download Code Coverage
5353
uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 # tag=v3.0.0
@@ -99,7 +99,7 @@ jobs:
9999

100100
steps:
101101
- name: Checkout
102-
uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748 # tag=v3
102+
uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748 # tag=v3.0.1
103103

104104
- name: Perform Scan
105105
uses: ShiftLeftSecurity/scan-action@master
@@ -124,7 +124,7 @@ jobs:
124124

125125
steps:
126126
- name: Checkout
127-
uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748 # tag=v3
127+
uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748 # tag=v3.0.1
128128

129129
- name: Semantic Release
130130
uses: cycjimmy/semantic-release-action@v3
@@ -139,13 +139,13 @@ jobs:
139139

140140
steps:
141141
- name: Checkout
142-
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3.0.0
142+
uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748 # tag=v3.0.1
143143
with:
144144
fetch-depth: 0
145145

146146
- name: Docker meta
147147
id: meta
148-
uses: docker/metadata-action@e5622373a38e60fb6d795a4421e56882f2d7a681 # tag=v3.6.2
148+
uses: docker/metadata-action@f2a13332ac1ce8c0a71aeac48a150dbb1838ab67 # tag=v3.7.0
149149
with:
150150
images: ${{ github.repository }}
151151
tags: |

.releaserc

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
{
2+
"repositoryUrl": "https://github.com/timoa/chrome-tab-rotate-server.git",
23
"branches": [
34
"master",
45
"develop"

Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
FROM node:16.14.2-alpine@sha256:28bed508446db2ee028d08e76fb47b935defa26a84986ca050d2596ea67fd506
1+
FROM node:16.15.0-alpine@sha256:1a9a71ea86aad332aa7740316d4111ee1bd4e890df47d3b5eff3e5bded3b3d10
22
ARG appPort=9000
33
# ARG microScannerToken
44

docker-compose.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ version: '3.3'
22

33
services:
44
api:
5-
image: timoa/chrome-tab-rotate-server:latest@sha256:8ab7634d706ccd63d9c1945f45725b17bc876016a98a663b19dd596ebf02ea0d
5+
image: timoa/chrome-tab-rotate-server:latest@sha256:eda3910afd2640f03b38d01d8213674fcddf82a55debc25d3d4b6d288f00d31f
66
environment:
77
- NODE_ENV=production
88
- NODE_HOST=0.0.0.0

0 commit comments

Comments
 (0)