Closed
Conversation
Some older python versions (e.g. 3.5.2) don't have it.
Workaround missing ssl.PROTOCOL_TLS
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
feat(py3): apply 2to3 to move away from py2 syntax where needed
This is only needed in the python 2 case so we don't need to do anything here.
There are various errors that require a newer version of pytest, which is incompatible with python2. While we migrate away, limit these tests to Python 3.9.
Improve testing
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
Remove six
Rearrange imports and minor polish
Signed-off-by: Felipe Zipitria <fzipitria@perceptyx.com>
feat(pypi): adds publishing using twine
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
fix(encoding): remove encoding for base64 encoded request
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
build: use git tag for version release
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
docs: enhance pypi documentation
Bumps [pyyaml](https://github.com/yaml/pyyaml) from 4.2b1 to 5.4. - [Release notes](https://github.com/yaml/pyyaml/releases) - [Changelog](https://github.com/yaml/pyyaml/blob/master/CHANGES) - [Commits](https://github.com/yaml/pyyaml/commits/5.4) Signed-off-by: dependabot[bot] <support@github.com>
Bump pyyaml from 4.2b1 to 5.4
…tests Made tests more reliable, enabled and fixed some tests
Added test build for Python 3.10 Split from PR #66, part 2
…cy-updates Updated dependencies
…to pre and post process runs
Give log checker more information, so it can produce identifiable log markers
…-test-support Improved test support
…eouts Split from PR #66, part 1
Rewrote http.py to be faster
- pin all third-party actions to commit SHAs instead of mutable tags - add explicit minimal permissions blocks to all workflows
fzipi
force-pushed
the
fix/harden-gha-workflows
branch
from
9867da8 to
4996d6d
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
what
why
@v2) are vulnerable to tag mutation attacks where a compromised or malicious upstream can replace the tag to point to different coderefs