| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 2025-08-28 | Use rust-android-gradle plugin as submodule | Kalle Lindström | 1 | -0/+6 | |
| 2025-03-20 | Add github action to verify dependency keys | David Göransson | 1 | -8/+22 | |
| 2025-02-19 | Ensure gradle lockfile is up-to-date in ci | Albin | 1 | -0/+5 | |
| 2025-02-04 | Change run commands to single line | Kalle Lindström | 1 | -2/+1 | |
| 2025-02-04 | Remove OWASP dependency check plugin | Albin | 1 | -21/+0 | |
| The OWASP DependencyCheck plugin has been replaced with `osv-scanner` which covers our use-case. | |||||
| 2025-01-21 | Fix CI | David Göransson | 1 | -0/+3 | |
| 2024-11-26 | Update Actions | tinyboxvk | 1 | -3/+3 | |
| Signed-off-by: tinyboxvk <13696594+tinyboxvk@users.noreply.github.com> | |||||
| 2024-11-04 | Exclude maybenot bundle check in lockfile script | Albin | 1 | -5/+0 | |
| 2024-10-30 | Add back maybenot_machines version 1 | Joakim Hulthe | 1 | -1/+1 | |
| 2024-09-17 | Fix ensure clean lockfile task | David Göransson | 1 | -0/+5 | |
| 2024-08-22 | Add top level `permissions` to all Github Actions workflows | Linus Färnstrand | 1 | -0/+3 | |
| The default permission on the repository is already set to read only. So in practice this makes no difference. But this makes that more explicit, and less relying on the repository being correctly configured. This also makes security scanning tools such as OpenSSF scorecard happier about the overall security of our repository. | |||||
| 2024-08-15 | Refactor lockfile script and gradle tasks | Albin | 1 | -4/+0 | |
| 2024-06-17 | Add action to ensure clean lockfile | Albin | 1 | -0/+31 | |
| 2023-11-06 | Trigger android audit action on suppression updates | Albin | 1 | -1/+5 | |
| 2023-08-03 | Use container in audit action | Albin | 1 | -3/+38 | |
| 2023-06-01 | Add daily scheduled gradle audit check | Albin | 1 | -0/+7 | |
| 2023-06-01 | Set audit task action name | Albin | 1 | -1/+2 | |
| 2023-06-01 | Limit PR audit trigger path to gradle lockfile | Albin | 1 | -1/+1 | |
| 2023-01-13 | Run yamlfix on all of .github/workflows/ | Linus Färnstrand | 1 | -12/+11 | |
| 2022-10-18 | Update actions/checkout to v3 | Hank | 1 | -1/+1 | |
| 2022-03-25 | Rename some Github Actions jobs to make them easier to find | Linus Färnstrand | 1 | -1/+1 | |
| 2022-01-12 | Change workflow trigger from push to pull_request | Oskar Nyberg | 1 | -1/+1 | |
| 2021-12-20 | Add Android dependency audit | Albin | 1 | -0/+15 | |
| Adds the OWASP Dependency-Check tool to the project to detect potentially vulnerable dependencies. Gradle is configured to skip the lintClassPath configuration, which relies on many dependencies that has been flagged to have CVEs, as it's related to the lint tooling rather than the project's compilation class path. The alternative would be to suppress specific CVEs, however that could potentially result in suppressed CVEs in project compilation class path. | |||||
