nextcloud

Commit Graph

Author	SHA1	Message	Date
Robin Appelman	a3f1d10f4d	ftp ci improvements Signed-off-by: Robin Appelman <robin@icewind.nl>	2 years ago
Robin Appelman	7ec80b3957	ftp logs Signed-off-by: Robin Appelman <robin@icewind.nl>	3 years ago
Robin Appelman	10b613810f	run ftp external storage tests against multiple ftp servers Signed-off-by: Robin Appelman <robin@icewind.nl>	3 years ago
Daniel Kesselberg	6cfc7f5dd3	Reset composer for automated psalm baseline update Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	2 years ago
Daniel Kesselberg	20da1080fa	Fix job to update psalm baseline Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	2 years ago
Morris Jobke	b4403201dc	Change output format of Psalm to Github This automatically inlines the errors into the diff view. Signed-off-by: Morris Jobke <hey@morrisjobke.de>	2 years ago
Julius Härtl	1e266e8b38	Run oci against all php versions Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Julius Härtl	cab44b6311	Run oci tests against phpunit9/php8 Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Christoph Wurst	7559a4a97d	Pin Psalm version for security analysis The action will otherwise pull dev-master and this can break easily as we just experience. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	2 years ago
Nextcloud bot	ed36b8b7f0	Updating command-compile.yml workflow from template Signed-off-by: Nextcloud bot <bot@nextcloud.com>	2 years ago
Nextcloud bot	c854a3fd38	Updating command-rebase.yml workflow from template Signed-off-by: Nextcloud bot <bot@nextcloud.com>	2 years ago
John Molakvoæ	fabd0a87b3	Update update-psalm-baseline.yml	2 years ago
John Molakvoæ	640f339b7d	Add checkout token	2 years ago
John Molakvoæ	525460c04d	Use COMMAND_BOT_PAT	2 years ago
John Molakvoæ	39931cab94	Update dependabot-approve-merge.yml	2 years ago
John Molakvoæ	f304633fbc	Add command-compile	2 years ago
John Molakvoæ (skjnldsv)	00105dca82	Add proper node testing Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	2 years ago
John Molakvoæ (skjnldsv)	49b490ce6d	Migrate to npm 7 Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	2 years ago
John Molakvoæ	3508976156	Add files via upload	2 years ago
Nextcloud bot	472a51e845	Updating dependabot-approve-merge.yml workflow from template Signed-off-by: Nextcloud bot <bot@nextcloud.com>	2 years ago
Nextcloud bot	b4cb5e2cff	Updating dependabot-approve-merge.yml workflow from template Signed-off-by: Nextcloud bot <bot@nextcloud.com>	3 years ago
skjnldsv	2fdd8c40ef	Updating command-rebase.yml workflow from template Signed-off-by: GitHub <noreply@github.com>	3 years ago
Julius Härtl	b18a7b8d22	Auto approve/merge also on stable branches Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
szaimen	716dd54af2	Create rebase command Signed-off-by: szaimen <szaimen@e.mail.de>	3 years ago
Joas Schilling	15e59a686d	Update dependabot config too Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Morris Jobke	deaf0f3aa2	Change reviewers of Psalm baseline update Change reviewers from Roeland and Me to Julius and Louis Signed-off-by: Morris Jobke <hey@morrisjobke.de>	3 years ago
John Molakvoæ	8c8777a841	Fix name	3 years ago
John Molakvoæ	38a19c263b	Add fixup.yml	3 years ago
John Molakvoæ	162229dbff	Fix psalm action	3 years ago
John Molakvoæ	fb583d5665	Fix psalm action	3 years ago
John Molakvoæ	f2e731e017	Add dependabot reviewer team and remove saturday for stable branches Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	3 years ago
John Molakvoæ	018e18bf8a	Fix dependabot config	3 years ago
John Molakvoæ (skjnldsv)	c3f9f09fb0	Add dependabot config with proper ignore for stable branches Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	3 years ago
Christoph Wurst	ab3424ad44	Add ext-zip as platform dependency Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Joas Schilling	6a43948a6e	FIx Oracle by testing on Ubuntu 20.04 until oci8.so is available for 21.04 Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
acsfer	2e41939ece	Typo	3 years ago
acsfer	9f56646694	Redirect users to forum for questions Be more specific so more users will go directly to the forum instead using Github for non-bug reports.	3 years ago
John Molakvoæ (skjnldsv)	fb183b457c	Add eslint testing Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	3 years ago
tobiasKaminsky	bfb535b2b2	Add funding info Signed-off-by: tobiasKaminsky <tobias@kaminsky.me>	3 years ago
Roeland Jago Douma	da652ded26	Move fixup check to action Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	3 years ago
Roeland Jago Douma	cc18213c98	Have psalm analysis directly on github Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	3 years ago
Roeland Jago Douma	08cae2ec44	Revert "Pin Psalm version to an older one"	3 years ago
Lukas Reschke	f1d2dcdaa5	Pin Psalm version to an older one Ref https://github.com/vimeo/psalm/issues/5144 Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	3 years ago
Roeland Jago Douma	fe65f8facf	Add dedicated baseline for OCP Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	3 years ago
Julius Härtl	c42385ef0f	Cleanup bundle files before checking the rebuild Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Julius Härtl	c7a320d880	jsunit: Run jsunit with chromium/puppeteer on github actions Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Lukas Reschke	47ac8e0028	Add Psalm Taint Flow Analysis This adds the Psalm Security Analysis, as described at https://psalm.dev/docs/security_analysis/ It also adds a plugin for adding input into AppFramework. The results can be viewed in the GitHub Security tab at https://github.com/nextcloud/server/security/code-scanning Q&A: Q: Why do you not use the shipped Psalm version? A: I do a lot of changes to the Psalm Taint behaviour. Using released versions is not gonna get us the results we want. Q: How do I improve false positives? A: https://psalm.dev/docs/security_analysis/avoiding_false_positives/ Q: How do I add custom sources? A: https://psalm.dev/docs/security_analysis/custom_taint_sources/ Q: We should run this on apps! A: Yes. Q: What will change in Psalm? A: Quite some of the PHP core functions are not yet marked to propagate the taint. This leads to results where the taint flow is lost. That's something that I am currently working on. Q: Why is the plugin MIT licensed? A: Because its the first of its kind (based on GitHub Code Search) and I want other people to copy it if they want to. Security is for all :) Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	3 years ago
Roeland Jago Douma	12f322d804	Also lint php8 Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	3 years ago
Joas Schilling	a524e83be0	Fix naming of jobs and steps Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Julius Härtl	2050517d44	Add github action for oci8 Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago

1 2 3

126 Commits (9aa248f007ef5734017e7e2daf5dac28c3321327)