Skip to content

Add "Assignment and Release Process" section in readme #2

Add "Assignment and Release Process" section in readme

Add "Assignment and Release Process" section in readme #2

Workflow file for this run

name: Push
on:
push:
branches:
- master
jobs:
check:
name: Check Advisories
runs-on: ubuntu-latest
steps:
- name: Clone repository
uses: actions/checkout@v3
- name: Set up Python 3
uses: actions/setup-python@v4
with:
python-version: "3.11"
- name: Install Python dependencies
run: pip install ./
- name: Run Advisories Checks
run: check_advisories --all
publish:
name: Publish CVE Advisories
needs: check
if: github.ref == 'refs/heads/master' && github.repository == 'mozilla/foundation-security-advisories'
runs-on: ubuntu-latest
environment: prod
permissions:
contents: write
steps:
- name: Clone repository
uses: actions/checkout@v3
with:
fetch-depth: 0 # Fetch all commits, needded for timestamps
- name: Set up git
run: |
git config user.name "github-actions[bot]"
git config user.email "github-actions[bot]@users.noreply.github.com"
- name: Set up Python 3
uses: actions/setup-python@v4
with:
python-version: "3.11"
- name: Install Python dependencies
run: pip install ./
- name: Publish Advisories
run: publish_cve_advisories
env:
CVE_API_KEY: ${{ secrets.CVE_API_KEY }}
CVE_ENV: ${{ vars.CVE_ENV }}
CVE_ORG: ${{ vars.CVE_ORG }}
CVE_USER: ${{ vars.CVE_USER }}