Merge main into develop #60
Conversation
Merge develop into Main
…ove outdated entries
Release packages
chore: bump version to 1.0.1 in package.json
Release packages
docs(ci): add Codecov & OpenSSF Scorecard integration
Add MIT License to the project
Update license section to link to LICENSE file
Add newline at the end of the dependabot.yml file
Fix formatting by adding newline at end of file
Added a comprehensive security policy document outlining supported versions, vulnerability reporting procedures, security best practices, and disclosure policies for the Oak SDK.
Add SECURITY.md for vulnerability reporting and best practices
fix(ci): update Codecov file path in workflow configuration
Updated project title and added security section.
Rename to Oak API SDK and add security section
chore: add initial Codecov configuration file
… push and pull request triggers
…ranch from triggers
fix(ci): correct Codecov file path in workflow configuration
Fix/codecov badge
docs: update CodeQL badge in README for consistency
docs: update readme to follow the website doc
…uild metadata overrides
fix(codecov): update Codecov action version and coverage file path in…
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
|
|
||
| steps: | ||
| - name: Checkout code | ||
| uses: actions/checkout@v4 |
Check warning
Code scanning / Scorecard
Pinned-Dependencies Medium
| if: steps.changesets.outputs.hasChangesets == 'false' | ||
| run: | | ||
| npm install -g npm@10.9.2 | ||
| npm install -g npm@11.11.0 |
Check warning
Code scanning / Scorecard
Pinned-Dependencies Medium
No description provided.