7.diff (7613B)
1 diff --git a/.github/workflows/fossa.yml b/.github/workflows/fossa.yml 2 index 712e421..db95efe 100644 3 --- a/.github/workflows/fossa.yml 4 +++ b/.github/workflows/fossa.yml 5 @@ -1,4 +1,5 @@ 6 name: Fossa Scan 7 +permissions: read-all 8 on: 9 push: 10 branches: [main] 11 @@ -8,7 +9,15 @@ jobs: 12 fossa-scan: 13 runs-on: ubuntu-latest 14 steps: 15 - - uses: actions/checkout@v2 16 - - uses: fossas/fossa-action@main 17 + - name: Harden Runner 18 + uses: step-security/harden-runner@14dc64f30986eaa2ad2dddcec073f5aab18e5a24 # v1 19 + with: 20 + allowed-endpoints: " 21 + app.fossa.com:443 22 + github.com:443 23 + objects.githubusercontent.com:443 24 + raw.githubusercontent.com:443" 25 + - uses: actions/checkout@629c2de402a417ea7690ca6ce3f33229e27606a5 # v2 26 + - uses: fossas/fossa-action@3764c5c941b43a8fdce352db1891f7e26e2e3cda # main 27 with: 28 api-key: ${{secrets.fossaApiKey}} 29 diff --git a/.github/workflows/playwright.yml b/.github/workflows/playwright.yml 30 index 5502c14..387d580 100644 31 --- a/.github/workflows/playwright.yml 32 +++ b/.github/workflows/playwright.yml 33 @@ -1,16 +1,39 @@ 34 name: Playwright Tests 35 on: 36 push: 37 - branches: [main, master] 38 + branches: [main] 39 pull_request: 40 - branches: [main, master] 41 + branches: [main] 42 +permissions: read-all 43 + 44 jobs: 45 test: 46 + permissions: 47 + contents: read # for actions/checkout to fetch code 48 timeout-minutes: 60 49 runs-on: ubuntu-latest 50 steps: 51 - - uses: actions/checkout@v2 52 - - uses: actions/setup-node@v2 53 + - name: Harden Runner 54 + uses: step-security/harden-runner@14dc64f30986eaa2ad2dddcec073f5aab18e5a24 # v1 55 + with: 56 + allowed-endpoints: " 57 + github.com:22 58 + github.com:443 59 + registry.npmjs.org:443 60 + playwright.azureedge.net:443 61 + azure.archive.ubuntu.com:443 62 + azure.archive.ubuntu.com:80 63 + security.ubuntu.com:80 64 + packages.microsoft.com:80 65 + packages.microsoft.com:443" 66 + - uses: actions/checkout@629c2de402a417ea7690ca6ce3f33229e27606a5 # v2 67 + with: 68 + persist-credentials: false 69 + - name: Reconfigure git to use HTTP authentication 70 + run: > 71 + git config --global url."https://github.com/".insteadOf 72 + ssh://git@github.com/ 73 + - uses: actions/setup-node@1f8c6b94b26d0feae1e387ca63ccbdc44d27b561 # v2 74 with: 75 node-version: "14.x" 76 - name: Install dependencies 77 @@ -19,7 +42,7 @@ jobs: 78 run: npx playwright install --with-deps && npx playwright install msedge 79 - name: Run Playwright tests 80 run: npx playwright test 81 - - uses: actions/upload-artifact@v2 82 + - uses: actions/upload-artifact@82c141cc518b40d92cc801eee768e7aafc9c2fa2 # v2 83 if: always() 84 with: 85 name: playwright-test-results 86 diff --git a/package-lock.json b/package-lock.json 87 index 9b67c73..9a42226 100644 88 --- a/package-lock.json 89 +++ b/package-lock.json 90 @@ -6,33 +6,33 @@ 91 "": { 92 "name": "matrix-art", 93 "dependencies": { 94 - "cors": "^2.8.5", 95 - "feed": "yshrsmz/feed#custom-elements", 96 - "lightgallery": "^2.3.0", 97 + "cors": "2.8.5", 98 + "feed": "yshrsmz/feed#c50d7a82c5b6141039830d615b19b760e173e231", 99 + "lightgallery": "2.3.0", 100 "meilisearch": "^0.23.0", 101 "next": "12.0.7", 102 - "node-localstorage": "^2.2.1", 103 - "pouchdb": "^7.2.2", 104 + "node-localstorage": "2.2.1", 105 + "pouchdb": "7.2.2", 106 "react": "17.0.2", 107 - "react-blurhash": "^0.1.3", 108 + "react-blurhash": "0.1.3", 109 "react-dom": "17.0.2" 110 }, 111 "devDependencies": { 112 - "@babel/plugin-transform-typescript": "^7.16.7", 113 - "@playwright/test": "^1.17.1", 114 - "@types/cors": "^2.8.12", 115 + "@babel/plugin-transform-typescript": "7.16.7", 116 + "@playwright/test": "1.17.1", 117 + "@types/cors": "2.8.12", 118 "@types/node": "17.0.8", 119 - "@types/node-localstorage": "^1.3.0", 120 - "@types/pouchdb": "^6.4.0", 121 + "@types/node-localstorage": "1.3.0", 122 + "@types/pouchdb": "6.4.0", 123 "@types/react": "17.0.38", 124 - "autoprefixer": "^10.4.1", 125 - "cross-env": "^7.0.3", 126 - "eslint": "^8.6.0", 127 + "autoprefixer": "10.4.1", 128 + "cross-env": "7.0.3", 129 + "eslint": "8.6.0", 130 "eslint-config-next": "12.0.7", 131 - "eslint-plugin-jsx-a11y": "^6.5.1", 132 - "eslint-plugin-unicorn": "^40.0.0", 133 - "postcss": "^8.4.5", 134 - "tailwindcss": "^3.0.11", 135 + "eslint-plugin-jsx-a11y": "6.5.1", 136 + "eslint-plugin-unicorn": "40.0.0", 137 + "postcss": "8.4.5", 138 + "tailwindcss": "3.0.11", 139 "typescript": "4.5.4" 140 } 141 }, 142 @@ -4468,7 +4468,8 @@ 143 }, 144 "node_modules/feed": { 145 "version": "4.2.2", 146 - "resolved": "git+ssh://git@github.com/yshrsmz/feed.git#86dffd1837c088fa5077675c8214397dc5284395", 147 + "resolved": "git+ssh://git@github.com/yshrsmz/feed.git#c50d7a82c5b6141039830d615b19b760e173e231", 148 + "integrity": "sha512-3saxrHixVr8JQZRmlffGF0p0q4xsk+ju25vv7vh5pnaPFJ/ZzpUjsIvUG3lr1oYeHHcruxLFhpQUrVVs3rMvqA==", 149 "license": "MIT", 150 "dependencies": { 151 "xml-js": "^1.6.11" 152 @@ -11988,8 +11989,9 @@ 153 } 154 }, 155 "feed": { 156 - "version": "git+ssh://git@github.com/yshrsmz/feed.git#86dffd1837c088fa5077675c8214397dc5284395", 157 - "from": "feed@yshrsmz/feed#custom-elements", 158 + "version": "git+ssh://git@github.com/yshrsmz/feed.git#c50d7a82c5b6141039830d615b19b760e173e231", 159 + "integrity": "sha512-3saxrHixVr8JQZRmlffGF0p0q4xsk+ju25vv7vh5pnaPFJ/ZzpUjsIvUG3lr1oYeHHcruxLFhpQUrVVs3rMvqA==", 160 + "from": "feed@yshrsmz/feed#c50d7a82c5b6141039830d615b19b760e173e231", 161 "requires": { 162 "xml-js": "^1.6.11" 163 } 164 diff --git a/package.json b/package.json 165 index f686cc2..4875489 100644 166 --- a/package.json 167 +++ b/package.json 168 @@ -16,33 +16,33 @@ 169 "lint": "next lint" 170 }, 171 "dependencies": { 172 - "cors": "^2.8.5", 173 - "feed": "yshrsmz/feed#custom-elements", 174 - "lightgallery": "^2.3.0", 175 + "cors": "2.8.5", 176 + "feed": "yshrsmz/feed#c50d7a82c5b6141039830d615b19b760e173e231", 177 + "lightgallery": "2.3.0", 178 "meilisearch": "^0.23.0", 179 "next": "12.0.7", 180 - "node-localstorage": "^2.2.1", 181 - "pouchdb": "^7.2.2", 182 + "node-localstorage": "2.2.1", 183 + "pouchdb": "7.2.2", 184 "react": "17.0.2", 185 - "react-blurhash": "^0.1.3", 186 + "react-blurhash": "0.1.3", 187 "react-dom": "17.0.2" 188 }, 189 "devDependencies": { 190 - "@babel/plugin-transform-typescript": "^7.16.7", 191 - "@playwright/test": "^1.17.1", 192 - "@types/cors": "^2.8.12", 193 + "@babel/plugin-transform-typescript": "7.16.7", 194 + "@playwright/test": "1.17.1", 195 + "@types/cors": "2.8.12", 196 "@types/node": "17.0.8", 197 - "@types/node-localstorage": "^1.3.0", 198 - "@types/pouchdb": "^6.4.0", 199 + "@types/node-localstorage": "1.3.0", 200 + "@types/pouchdb": "6.4.0", 201 "@types/react": "17.0.38", 202 - "autoprefixer": "^10.4.1", 203 - "cross-env": "^7.0.3", 204 - "eslint": "^8.6.0", 205 + "autoprefixer": "10.4.1", 206 + "cross-env": "7.0.3", 207 + "eslint": "8.6.0", 208 "eslint-config-next": "12.0.7", 209 - "eslint-plugin-jsx-a11y": "^6.5.1", 210 - "eslint-plugin-unicorn": "^40.0.0", 211 - "postcss": "^8.4.5", 212 - "tailwindcss": "^3.0.11", 213 + "eslint-plugin-jsx-a11y": "6.5.1", 214 + "eslint-plugin-unicorn": "40.0.0", 215 + "postcss": "8.4.5", 216 + "tailwindcss": "3.0.11", 217 "typescript": "4.5.4" 218 } 219 -} 220 +} 221 \ No newline at end of file