tidy up the text and prepare to tag 0.1

ministryofjustice · Sep 10, 2024 · c7e6bcc · c7e6bcc
1 parent 4573a0b
commit c7e6bcc
Show file tree

Hide file tree

Showing 16 changed files with 20 additions and 20 deletions.
diff --git a/.github/actions/security_owasp_reports/action.yml b/.github/actions/security_owasp_reports/action.yml
@@ -20,8 +20,8 @@ runs:
     with:
       name: gradle-owasp-dependency-check-${{ github.event.repository.name }}
       path: build/reports/dependency-check-report.html
-  - uses: ministryofjustice/hmpps-github-actions/.github/actions/slack_codescan_notification@main # WORKFLOW_VERSION
+  - uses: ministryofjustice/hmpps-github-actions/.github/actions/slack_codescan_notification"0.1 # WORKFLOW_VERSION
     with:
       channel_id: ${{ inputs.channel_id}}
-      title: "OWASP issues identified"
+      title: "OWASP issues"
       SLACK_BOT_TOKEN: ${{ inputs.SLACK_BOT_TOKEN }}
diff --git a/.github/actions/security_trivy_reports/action.yml b/.github/actions/security_trivy_reports/action.yml
@@ -15,7 +15,7 @@ runs:
     with:
       sarif_file: 'trivy-results.sarif'
       category: trivy-dependency-check
-  - uses: ministryofjustice/hmpps-github-actions/.github/actions/slack_codescan_notification@main # WORKFLOW_VERSION
+  - uses: ministryofjustice/hmpps-github-actions/.github/actions/slack_codescan_notification"0.1 # WORKFLOW_VERSION
     with:
       channel_id: ${{ inputs.channel_id}}
       title: "Trivy issues identified"

diff --git a/.github/actions/slack_codescan_notification/action.yml b/.github/actions/slack_codescan_notification/action.yml
@@ -17,13 +17,13 @@ runs:
       with:
         channel-id: ${{ inputs.channel_id}}
         payload: |
-          { "text": "${{ inputs.title }} - issues identified",
+          { "text": "*${{ inputs.title }}* - issues identified",
             "blocks": [
               {
                 "type": "section",
                 "text": {
                   "type": "mrkdwn",
-                  "text": ":warning: Github Actions ${{ inputs.title }} ran and identified issues"
+                  "text": ":warning: Github Workflow ${{ github.workflow }} ran and identified issues"
                 }
               },
               {

diff --git a/.github/actions/slack_failure_results/action.yml b/.github/actions/slack_failure_results/action.yml
@@ -15,7 +15,7 @@ runs:
   using: "composite"
   steps:
     - name: process slack message results # returns SLACK_TXT
-      uses: ministryofjustice/hmpps-github-actions/.github/actions/slack_prepare_results@main # WORKFLOW_VERSION
+      uses: ministryofjustice/hmpps-github-actions/.github/actions/slack_prepare_results"0.1 # WORKFLOW_VERSION
       id: slack_message_result 
       with:
         input_file: ${{ inputs.input_file }}

diff --git a/.github/workflows/security_npm_dependency.yml b/.github/workflows/security_npm_dependency.yml
@@ -32,7 +32,7 @@ jobs:
       id: npm
       run: npx audit-ci@^7 --config ./audit-ci.json -o json > npm-security-check-reports.json
       continue-on-error: true
-    - uses: ministryofjustice/hmpps-github-actions/.github/actions/security_npm_dependency@main # WORKFLOW_VERSION
+    - uses: ministryofjustice/hmpps-github-actions/.github/actions/security_npm_dependency"0.1 # WORKFLOW_VERSION
       if: success() || steps.npm.conclusion == 'failure'
       with:
         channel_id: ${{ inputs.channel_id }}

diff --git a/.github/workflows/security_npm_outdated.yml b/.github/workflows/security_npm_outdated.yml
@@ -42,7 +42,7 @@ jobs:
       id: npm
       run: npm outdated ${{ inputs.dependencies_to_check }} > npm-outdated-reports.txt
       continue-on-error: true
-    - uses: ministryofjustice/hmpps-github-actions/.github/actions/security_npm_outdated@main # WORKFLOW_VERSION 
+    - uses: ministryofjustice/hmpps-github-actions/.github/actions/security_npm_outdated"0.1 # WORKFLOW_VERSION 
       if: success() || steps.npm.conclusion == 'failure'
       with:
         channel_id: ${{ inputs.channel_id }}

diff --git a/.github/workflows/security_owasp.yml b/.github/workflows/security_owasp.yml
@@ -37,7 +37,7 @@ jobs:
       id: owasp-analyse
       run: ./gradlew dependencyCheckAnalyze --info
 
-    - uses: ministryofjustice/hmpps-github-actions/.github/actions/security_owasp_reports@main # WORKFLOW_VERSION
+    - uses: ministryofjustice/hmpps-github-actions/.github/actions/security_owasp_reports"0.1 # WORKFLOW_VERSION
       if: success() || steps.owasp-analyse.conclusion == 'failure'
       with:
         channel_id: ${{ inputs.channel_id }}

diff --git a/.github/workflows/security_trivy.yml b/.github/workflows/security_trivy.yml
@@ -39,7 +39,7 @@ jobs:
         output: 'trivy-results.sarif'
         # exit-code: 1
         limit-severities-for-sarif: true
-    - uses: ministryofjustice/hmpps-github-actions/.github/actions/security_trivy_reports@main # WORKFLOW_VERSION
+    - uses: ministryofjustice/hmpps-github-actions/.github/actions/security_trivy_reports"0.1 # WORKFLOW_VERSION
       if: success()  || steps.trivy.conclusion == 'failure'
       with:
         channel_id: ${{ inputs.channel_id}}

diff --git a/.github/workflows/security_veracode_pipeline_scan.yml b/.github/workflows/security_veracode_pipeline_scan.yml
@@ -69,7 +69,7 @@ jobs:
         java-version: '21'
         distribution: 'temurin'
     - name: prepare assets
-      uses: ministryofjustice/hmpps-github-actions/.github/actions/security_veracode_prepare_artifacts@main # WORKFLOW_VERSION
+      uses: ministryofjustice/hmpps-github-actions/.github/actions/security_veracode_prepare_artifacts"0.1 # WORKFLOW_VERSION
     - name: "Download/Extract pipeline scanner"
       shell: bash
       run: |
@@ -139,7 +139,7 @@ jobs:
         path: results.txt
     - name: send a failure slack message
       if: failure() 
-      uses: ministryofjustice/hmpps-github-actions/.github/actions/slack_failure_results@main # WORKFLOW_VERSION
+      uses: ministryofjustice/hmpps-github-actions/.github/actions/slack_failure_results"0.1 # WORKFLOW_VERSION
       with:
         SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
         channel_id: ${{ inputs.channel_id }}

diff --git a/.github/workflows/security_veracode_policy_scan.yml b/.github/workflows/security_veracode_policy_scan.yml
@@ -69,7 +69,7 @@ jobs:
         java-version: '21'
         distribution: 'temurin'
     - name: prepare assets
-      uses: ministryofjustice/hmpps-github-actions/.github/actions/security_veracode_prepare_artifacts@main # WORKFLOW_VERSION
+      uses: ministryofjustice/hmpps-github-actions/.github/actions/security_veracode_prepare_artifacts"0.1 # WORKFLOW_VERSION
     - name: "Download/Extract veracode agent"
       run: wget https://repo1.maven.org/maven2/com/veracode/vosp/api/wrappers/vosp-api-wrappers-java/22.9.10.3/vosp-api-wrappers-java-22.9.10.3.jar -O VeracodeJavaAPI.jar
     - name: "Upload to Veracode"
@@ -112,7 +112,7 @@ jobs:
         path: output.txt
     - name: send a failure slack message
       if: failure() 
-      uses: ministryofjustice/hmpps-github-actions/.github/actions/slack_failure_results@main # WORKFLOW_VERSION
+      uses: ministryofjustice/hmpps-github-actions/.github/actions/slack_failure_results"0.1 # WORKFLOW_VERSION
       with:
         SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
         channel_id: ${{ inputs.channel_id }}

diff --git a/templates/security_npm_dependency.yml b/templates/security_npm_dependency.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   security-npm-depencency-check:
     name: Project security npm dependency check
-    uses: ministryofjustice/hmpps-github-actions/.github/workflows/security_npm_dependency.yml@main # WORKFLOW_VERSION 
+    uses: ministryofjustice/hmpps-github-actions/.github/workflows/security_npm_dependency.yml"0.1 # WORKFLOW_VERSION 
     with:
       channel_id: ${{ vars.SLACK_CHANNEL_ID }}
     secrets:

diff --git a/templates/security_npm_outdated.yml b/templates/security_npm_outdated.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   security-npm-depencency-check:
     name: Project security npm dependency check
-    uses: ministryofjustice/hmpps-github-actions/.github/workflows/security_npm_outdated.yml@main # WORKFLOW_VERSION 
+    uses: ministryofjustice/hmpps-github-actions/.github/workflows/security_npm_outdated.yml"0.1 # WORKFLOW_VERSION 
     with:
       channel_id: ${{ vars.SLACK_CHANNEL_ID }}
       version: main

diff --git a/templates/security_owasp.yml b/templates/security_owasp.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   security-kotlin-owasp-check:
     name: Kotlin security OWASP dependency check
-    uses: ministryofjustice/hmpps-github-actions/.github/workflows/security_owasp.yml@main # WORKFLOW_VERSION 
+    uses: ministryofjustice/hmpps-github-actions/.github/workflows/security_owasp.yml"0.1 # WORKFLOW_VERSION 
     with:
       channel_id: ${{ vars.SLACK_CHANNEL_ID }}      
     secrets:

diff --git a/templates/security_trivy.yml b/templates/security_trivy.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   security-kotlin-trivy-check:
     name: Project security trivy dependency check
-    uses: ministryofjustice/hmpps-github-actions/.github/workflows/security_trivy.yml@main # WORKFLOW_VERSION 
+    uses: ministryofjustice/hmpps-github-actions/.github/workflows/security_trivy.yml"0.1 # WORKFLOW_VERSION 
     with:
       channel_id: ${{ vars.SLACK_CHANNEL_ID }}
     secrets:

diff --git a/templates/security_veracode_pipeline_scan.yml b/templates/security_veracode_pipeline_scan.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   security-veracode-policy-check:
     name: Project security veracode policy scan
-    uses: ministryofjustice/hmpps-github-actions/.github/workflows/security_veracode_pipeline_scan.yml@main # WORKFLOW_VERSION 
+    uses: ministryofjustice/hmpps-github-actions/.github/workflows/security_veracode_pipeline_scan.yml"0.1 # WORKFLOW_VERSION 
     with:
       channel_id: ${{ vars.SLACK_CHANNEL_ID }}
     secrets:

diff --git a/templates/security_veracode_policy_scan.yml b/templates/security_veracode_policy_scan.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   security-veracode-policy-check:
     name: Project security veracode policy scan
-    uses: ministryofjustice/hmpps-github-actions/.github/workflows/security_veracode_policy_scan.yml@main # WORKFLOW_VERSION 
+    uses: ministryofjustice/hmpps-github-actions/.github/workflows/security_veracode_policy_scan.yml"0.1 # WORKFLOW_VERSION 
     with:
       channel_id: ${{ vars.SLACK_CHANNEL_ID }}
     secrets: