Merge pull request #18 from niaid/imp-sec-issues

Switch scan to typescript

.github/workflows/build.yml

@@ -14,8 +14,8 @@ jobs:
         os:
         - windows-2019
         - windows-2022
-        - macos-11
-        - macos-12
+        - macos-13
+        - macos-14
         - ubuntu-20.04
         - ubuntu-22.04
         nodejs:

.github/workflows/codeql-analysis-javascript.yaml

@@ -4,10 +4,10 @@ name: "CodeQL JavaScript/TypeScript"
 
 on:
   push:
-    branches: ["master", "main"]
+    branches: ["master", "main", "develop"]
   pull_request:
     # The branches below must be a subset of the branches above
-    branches: ["master", "main"]
+    branches: ["master", "main", "develop"]
   schedule:
     - cron: "27 4 * * 5"
 
@@ -23,7 +23,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        language: ["javascript"]
+        language: ["typescript"]
 
     steps:
       - name: Checkout repository

.github/workflows/reusable-verify.yml

@@ -46,7 +46,9 @@ jobs:
         key: ${{ secrets.SSH_KEY_PEM }}
         known_hosts: unnecessary
     - name: git clone through SSH
-      run: git clone [email protected]:niaid/monarch-actions-key-writer.git tmp
+      run: |
+        ssh -vT [email protected] || true
+        git clone [email protected]:niaid/monarch-actions-key-writer.git tmp
 
   ssh-pkcs8:
     name: Connect to github.com (PKCS8 format)
@@ -64,7 +66,9 @@ jobs:
         key: ${{ secrets.SSH_KEY_PKCS8 }}
         known_hosts: unnecessary
     - name: git clone through SSH
-      run: git clone [email protected]:niaid/monarch-actions-key-writer.git tmp
+      run: |
+        ssh -vT [email protected] || true
+        git clone [email protected]:niaid/monarch-actions-key-writer.git tmp
 
   ssh-rfc4716:
     name: Connect to github.com (RFC4716 format)
@@ -82,7 +86,9 @@ jobs:
         key: ${{ secrets.SSH_KEY_RFC4716 }}
         known_hosts: unnecessary
     - name: git clone through SSH
-      run: git clone [email protected]:niaid/monarch-actions-key-writer.git tmp
+      run: |
+        ssh -vT [email protected] || true
+        git clone [email protected]:niaid/monarch-actions-key-writer.git tmp
 
   key_if_exists_replace-key_exists:
     name: if_key_exists=replace / key exists
@@ -106,7 +112,9 @@ jobs:
         known_hosts: unnecessary
         if_key_exists: replace
     - name: git clone through SSH
-      run: git clone [email protected]:niaid/monarch-actions-key-writer.git tmp
+      run: |
+        ssh -vT [email protected] || true
+        git clone [email protected]:niaid/monarch-actions-key-writer.git tmp
 
   key_if_exists_replace-key_doesnt_exist:
     name: if_key_exists=replace / key doesn't exist
@@ -125,7 +133,9 @@ jobs:
         known_hosts: unnecessary
         if_key_exists: replace
     - name: git clone through SSH
-      run: git clone [email protected]:niaid/monarch-actions-key-writer.git tmp
+      run: |
+        ssh -vT [email protected] || true
+        git clone [email protected]:niaid/monarch-actions-key-writer.git tmp
 
   key_if_exists_ignore-key_exists:
     name: if_key_exists=ignore / key exists
@@ -149,7 +159,9 @@ jobs:
         known_hosts: unnecessary
         if_key_exists: ignore
     - name: git clone through SSH
-      run: git clone [email protected]:niaid/monarch-actions-key-writer.git tmp
+      run: |
+        ssh -vT [email protected] || true
+        git clone [email protected]:niaid/monarch-actions-key-writer.git tmp
 
   key_if_exists_ignore-key_doesnt_exist:
     name: if_key_exists=ignore / key doesn't exist
@@ -168,7 +180,9 @@ jobs:
         known_hosts: unnecessary
         if_key_exists: ignore
     - name: git clone through SSH
-      run: git clone [email protected]:niaid/monarch-actions-key-writer.git tmp
+      run: |
+        ssh -vT [email protected] || true
+        git clone [email protected]:niaid/monarch-actions-key-writer.git tmp
 
   key_if_exists_fail-key_exists:
     name: if_key_exists=fail / key exists
@@ -193,7 +207,9 @@ jobs:
         if_key_exists: fail
       continue-on-error: true
     - name: git clone through SSH
-      run: git clone [email protected]:niaid/monarch-actions-key-writer.git tmp
+      run: |
+        ssh -vT [email protected] || true
+        git clone [email protected]:niaid/monarch-actions-key-writer.git tmp
 
   key_if_exists_fail-key_doesnt_exist:
     name: if_key_exists=fail / key doesn't exist
@@ -212,4 +228,6 @@ jobs:
         known_hosts: unnecessary
         if_key_exists: fail
     - name: git clone through SSH
-      run: git clone [email protected]:niaid/monarch-actions-key-writer.git tmp
+      run: |
+        ssh -vT [email protected] || true
+        git clone [email protected]:niaid/monarch-actions-key-writer.git tmp

.github/workflows/verify-on-macos.yml

@@ -11,8 +11,8 @@ jobs:
       fail-fast: false
       matrix:
         os:
-        - macos-11
-        - macos-12
+        - macos-13
+        - macos-14
     uses: "./.github/workflows/reusable-verify.yml"
     with:
       os: ${{ matrix.os }}