Updating to common GitHub Action 1.0.5 #457
Open
+97
−19
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.



This pull request updates the
.github/workflows/ci-main-pull-request-stub.ymlworkflow file to improve configuration flexibility and security scanning coverage. The most important changes are grouped below:Description
This pull request updates the CI workflow to STUB_VERSION 1.0.5 and enabled few fields like
This pull request updates the
.github/workflows/ci-main-pull-request-stub.ymlworkflow configuration to improve automation and security scanning. The most important changes include updating the stub version, enabling BlackDuck SCA scanning, and making the workflow more dynamic and descriptive for project-specific and language-specific settings.Versioning and Configuration Updates:
STUB_VERSIONenvironment variable from"1.0.4"to"1.0.5"to reflect the latest changes in the workflow.Security and Quality Scans:
perform-blackduck-sca-scanby default to ensure BlackDuck SCA scanning is performed as part of the workflow.perform-docker-scantofalseto explicitly control Docker image scanning, clarifying intent for future changes.Project and Language Dynamism:
polaris-project-nameto use the repository name dynamically with${{ github.event.repository.name }}for more flexible project identification.language: 'ruby'to specify the primary programming language for build and SonarQube analysis, improving accuracy of language-specific checks.Types of changes
Checklist:
Gemfile.lockhas changed, I have used--conservativeto do it and included the full output in the Description above.