diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 872bcba9..a6a5abdd 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -9,6 +9,11 @@ on: branches: - '**' +permissions: + pull-requests: write + contents: write + id-token: write + jobs: dart: strategy: @@ -34,3 +39,9 @@ jobs: run: dart run dart_dev format --check - name: Tests run: dart run dart_dev test ${{ matrix.sdk != '2.19.6' && '--test-args="--exclude-tags dart2"' || '' }} + - name: SBOM + if: ${{ matrix.sdk == '2.19.6' && matrix.os == 'ubuntu' }} + uses: anchore/sbom-action@v0 + with: + path: ./ # Assuming actions/checkout default location + format: cyclonedx-json \ No newline at end of file diff --git a/Dockerfile b/Dockerfile deleted file mode 100644 index 6a4e95f7..00000000 --- a/Dockerfile +++ /dev/null @@ -1,5 +0,0 @@ -FROM dart:2.19.6 -WORKDIR /build -ADD pubspec.yaml /build -RUN dart pub get -FROM scratch diff --git a/skynet.yaml b/skynet.yaml deleted file mode 100644 index 56261e63..00000000 --- a/skynet.yaml +++ /dev/null @@ -1,19 +0,0 @@ -name: verify-github-actions -description: Verify that the github actions run passed, this is needed to make pipelines pass without manual intervention -contact: 'Frontend Frameworks Architecture / #support-frontend-architecture' -image: drydock.workiva.net/workiva/skynet-images:3728345 # Uses the image from this branch: https://github.com/Workiva/skynet-images/pull/127 -size: small -timeout: 600 - -run: - on-pull-request: true - on-promotion: true - when-modified-file-name-is: - - skynet.yaml - -env: -# encrypted github token used for requests to api.github.com - - secure: PBYV1M83AKj5+NlaDsDv8ey/mw9+0HOx15Y5/ot6LCespcHXnj7s+nVqKCotoPjyC2rQEaeXh98KzSriMhLou6dYJHk= - -scripts: - - python3 /actions/verify_github_actions.py