From a909592533a601e7e84c4dd502c1419cd7799562 Mon Sep 17 00:00:00 2001 From: Anthony Stirling <77850077+Frooodle@users.noreply.github.com> Date: Sat, 21 Dec 2024 15:01:16 +0000 Subject: [PATCH 1/6] Update CODEOWNERS --- .github/CODEOWNERS | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 7c81b9b7..61d7c238 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -1,2 +1,2 @@ # All PRs to V1 must be approved by Frooodle -* @Frooodle +* @Frooodle @reecebrowne @Ludy87 @DarioGii From d136f9bd3125fda5ac484b47ede3a31e91028314 Mon Sep 17 00:00:00 2001 From: Anthony Stirling <77850077+Frooodle@users.noreply.github.com> Date: Sat, 21 Dec 2024 15:55:47 +0000 Subject: [PATCH 2/6] Update README.md --- README.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/README.md b/README.md index 37d06f3c..5b879378 100644 --- a/README.md +++ b/README.md @@ -11,8 +11,6 @@ [Stirling-PDF](https://www.stirlingpdf.com) is a robust, locally hosted web-based PDF manipulation tool using Docker. It enables you to carry out various operations on PDF files, including splitting, merging, converting, reorganizing, adding images, rotating, compressing, and more. This locally hosted web application has evolved to encompass a comprehensive set of features, addressing all your PDF requirements. -Stirling-PDF does not initiate any outbound calls for record-keeping or tracking purposes. - All files and PDFs exist either exclusively on the client side, reside in server memory only during task execution, or temporarily reside in a file solely for the execution of the task. Any file downloaded by the user will have been deleted from the server by that point. ![stirling-home](images/stirling-home.jpg) From 67a08a7c05911189b3d7d13d6ccd7a76392aa52c Mon Sep 17 00:00:00 2001 From: Ludy87 Date: Sat, 21 Dec 2024 16:59:33 +0100 Subject: [PATCH 3/6] Update check_properties.yml --- .github/workflows/check_properties.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/check_properties.yml b/.github/workflows/check_properties.yml index 83a6e7de..2a7ba12b 100644 --- a/.github/workflows/check_properties.yml +++ b/.github/workflows/check_properties.yml @@ -31,7 +31,7 @@ jobs: uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: repository: ${{ github.event.pull_request.head.repo.full_name }} - ref: ${{ github.event.pull_request.head.ref }} + ref: refs/pull/${{ github.event.pull_request.number }}/merge path: pr-branch fetch-depth: 0 From 70cc03fc6374f4930f7ca24f4afdf1d485ec7292 Mon Sep 17 00:00:00 2001 From: Ludy87 Date: Sat, 21 Dec 2024 17:05:45 +0100 Subject: [PATCH 4/6] Removing duplicate permissions --- .github/workflows/auto-labeler.yml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/.github/workflows/auto-labeler.yml b/.github/workflows/auto-labeler.yml index b7c8470b..8856314a 100644 --- a/.github/workflows/auto-labeler.yml +++ b/.github/workflows/auto-labeler.yml @@ -5,12 +5,10 @@ on: permissions: contents: read + pull-requests: write jobs: labeler: - permissions: - contents: read - pull-requests: write runs-on: ubuntu-latest steps: - name: Harden Runner @@ -19,7 +17,7 @@ jobs: egress-policy: audit - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - + - name: Apply Labels uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5.0.0 with: From f09e70218de787726cc31fac6000a886643e82e6 Mon Sep 17 00:00:00 2001 From: Ludy87 Date: Sat, 21 Dec 2024 17:17:26 +0100 Subject: [PATCH 5/6] Update check_properties.yml --- .github/workflows/check_properties.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/check_properties.yml b/.github/workflows/check_properties.yml index 2a7ba12b..3988e850 100644 --- a/.github/workflows/check_properties.yml +++ b/.github/workflows/check_properties.yml @@ -31,7 +31,7 @@ jobs: uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: repository: ${{ github.event.pull_request.head.repo.full_name }} - ref: refs/pull/${{ github.event.pull_request.number }}/merge + ref: "${{ github.event.pull_request.merge_commit_sha }}" path: pr-branch fetch-depth: 0 From ae44c4c723249006f4d00aed8eeec302b19774a2 Mon Sep 17 00:00:00 2001 From: Ludy87 Date: Sat, 21 Dec 2024 17:50:42 +0100 Subject: [PATCH 6/6] Update check_properties.yml --- .github/workflows/check_properties.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/check_properties.yml b/.github/workflows/check_properties.yml index 3988e850..24f7f316 100644 --- a/.github/workflows/check_properties.yml +++ b/.github/workflows/check_properties.yml @@ -14,6 +14,8 @@ jobs: check-files: if: github.event_name == 'pull_request_target' runs-on: ubuntu-latest + permissions: + contents: read steps: - name: Harden Runner uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2