Facebook/react-native
1
0
Fork 0
mirror of https://github.com/facebook/react-native.git synced 2025-11-01 09:14:26 +00:00
Code Issues Packages Projects Releases Wiki Activity
25,525 Commits 541 Branches 635 Tags
6125f1f866da129dbdc01f5b9e4fac27fa77ed8a
Commit Graph

4 Commits

Author SHA1 Message Date
Varun Sharma 3da3d82320 ci: Add GitHub token permissions for workflows (#34122) 
Summary:
This PR adds minimum token permissions for the GITHUB_TOKEN using https://github.com/step-security/secure-workflows.

GitHub recommends defining minimum GITHUB_TOKEN permissions for securing GitHub Actions workflows
- https://github.blog/changelog/2021-04-20-github-actions-control-permissions-for-github_token/
- https://docs.github.com/en/actions/security-guides/automatic-token-authentication#modifying-the-permissions-for-the-github_token
- The Open Source Security Foundation (OpenSSF) [Scorecards](https://github.com/ossf/scorecard) treats not setting token permissions as a high-risk issue

This project is part of the top 100 critical projects as per OpenSSF (https://github.com/ossf/wg-securing-critical-projects), so fixing the token permissions to improve security.

Signed-off-by: Varun Sharma <varunsh@stepsecurity.io>

## Changelog
[General] [Security] - Add GitHub token permissions for workflows
<!-- Help reviewers and the release process by writing your own changelog entry. For an example, see:
https://github.com/facebook/react-native/wiki/Changelog
-->

Pull Request resolved: https://github.com/facebook/react-native/pull/34122

Test Plan: N/A

Reviewed By: cipolleschi

Differential Revision: D37597988

Pulled By: cortinico

fbshipit-source-id: 2f45914e2202a7b5bf7fa60b019dd12cdcf31952
 2022-07-04 03:41:44 -07:00
Simek 09b06485e9 GitHub: update workflow actions (#33595) 
Summary:
This PR updates the GitHub actions uses in the repository workflows.

## Changelog

N/A

Pull Request resolved: https://github.com/facebook/react-native/pull/33595

Test Plan: Run the workflows.

Reviewed By: rickhanlonii

Differential Revision: D35495697

Pulled By: cortinico

fbshipit-source-id: a41a83dc61f199f9acbc0ce28d6a23fafc94a99c
 2022-04-08 06:26:47 -07:00
Nicola Corti 3220029514 Fix broken Test Docker Android 
Summary:
Test Docker Android is failing with `No space left on device`
I've fixed it by freeing up some space on the runner.

I'm looking into potentially removing this job entirely as I believe it's not
really helpful at the moment.

Changelog:
[Internal] [Changed] - Fix broken Test Docker Android

Reviewed By: ShikaSD

Differential Revision: D35013831

fbshipit-source-id: 594e65fa05c7dfc8b5acfde88658b341d26aa586
 2022-03-21 11:42:18 -07:00
Héctor Ramos 232d02c5f6 Move Docker test to GitHub Actions 
Summary:
The test_docker_android job on Circle CI has a simple function: verify the base community RN Android image can be downloaded, and verify that we can use it to build a container with a compiled Android test app.

Since the job is not strictly running a suite of tests, it can be moved to GitHub Actions. It will run on GitHub Actions as a Check on commits to main and pull requests.

As building the test image requires the use of the base React Native Android image, we can skip downloading the base container and go straight to building the test image.

Changelog: [Internal]

Reviewed By: fkgozali

Differential Revision: D31521978

fbshipit-source-id: ca8372a1464054e37f2da28a3ecfbc8f84db0408
 2021-10-09 11:37:53 -07:00