Workflows / Actions for Projects Creating GitHub Actions

This is a collection of workflows / actions for releasing and managing GitHub Actions itself

codeql-analysis.yml

Based off of GitHub’s reusable workflow, this action is modified to run CodeQL for the actions language.

github/workflows/codeql.yml

name: "CodeQL Advanced"

on:
  push:
  pull_request:
  workflow_dispatch:
  schedule:
    # https://docs.github.com/en/actions/writing-workflows/choosing-when-your-workflow-runs/events-that-trigger-workflows#schedule
    - cron: '0 5 * * *'
permissions: read-all
jobs:
  codeql-analysis-call:
    permissions:
      actions: read
      contents: read
      security-events: write
    uses: spring-io/github-actions/.github/workflows/codeql-analysis.yml@1

update-dependabot

Renders a Mustache template at .github/specs/dependabot.spec.yml into .github/dependabot.yml, populated with the active supported branches from the Spring project generations API and the corresponding open GitHub milestones.

See update-dependabot/README.adoc for the template placeholders, a sample workflow, and the full list of inputs.