diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..0e08b71 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,11 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file + +version: 2 +updates: + - package-ecosystem: "github-actions" # See documentation for possible values + directory: "/" # This points to .github/workflows + schedule: + interval: "daily" diff --git a/.github/workflows/preflight-checker-workflow.yml b/.github/workflows/preflight-checker-workflow.yml new file mode 100644 index 0000000..0866a34 --- /dev/null +++ b/.github/workflows/preflight-checker-workflow.yml @@ -0,0 +1,25 @@ +name: QC Preflight Checks + +on: + pull_request: + branches: [ main ] + push: + branches: [ main ] + workflow_dispatch: + +jobs: + preflight: + name: Run QC Preflight Checks + uses: qualcomm/qcom-reusable-workflows/.github/workflows/reusable-qcom-preflight-checks-orchestrator.yml@v2 + with: + enable-semgrep-scan: true + enable-dependency-review: true + enable-repolinter-check: true + enable-copyright-license-check: true + enable-commit-email-check: true + enable-commit-msg-check: false + enable-armor-checkers: false + + permissions: + contents: read + security-events: write diff --git a/.github/workflows/qualcomm-organization-repolinter.yml b/.github/workflows/qualcomm-organization-repolinter.yml deleted file mode 100644 index 44dc422..0000000 --- a/.github/workflows/qualcomm-organization-repolinter.yml +++ /dev/null @@ -1,30 +0,0 @@ -name: Qualcomm Organization Repolinter - -on: - push: - branches: [ "main" ] - pull_request: - branches: [ "main" ] - workflow_dispatch: - -jobs: - repolinter: - runs-on: ubuntu-latest - steps: - - name: Checkout Repo - uses: actions/checkout@v4 - - name: Verify repolinter config file is present - id: check_files - uses: andstor/file-existence-action@v3 - with: - files: "repolint.json" - - name: Run Repolinter with local repolint.json - if: steps.check_files.outputs.files_exists == 'true' - uses: todogroup/repolinter-action@v1 - with: - config_file: "repolint.json" - - name: Run Repolinter with default ruleset - if: steps.check_files.outputs.files_exists == 'false' - uses: todogroup/repolinter-action@v1 - with: - config_url: "https://raw.githubusercontent.com/qualcomm/.github/main/repolint.json"