Victor Lyuboslavsky
9f80b9b07a
<!-- Add the related story/sub-task/bug number, like Resolves #123, or remove if NA --> **Related issue:** Resolves #41198 <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Chores** * Updated security hardening tools across multiple GitHub Actions workflows to the latest available version for enhanced CI/CD infrastructure protection and resilience. * Enabled additional security validation rules in workflow configuration to strengthen infrastructure oversight and improve vulnerability detection capabilities across build and deployment pipelines. <!-- end of auto-generated comment: release notes by coderabbit.ai -->
42 lines
1.6 KiB
YAML
42 lines
1.6 KiB
YAML
name: Check Microsoft MDM related protocol specification feeds for changes
|
|
|
|
# This action will check Microsoft MDM related protocol specification feeds
|
|
# for changes and create a Github issue for MDM engineers to review the changes
|
|
|
|
on:
|
|
schedule:
|
|
# Daily at 8:35pm CDT (1:35am UTC) -- run during off-hours to prevent hitting GitHub API rate limit
|
|
- cron: "35 1 * * *"
|
|
|
|
jobs:
|
|
check-ms-mdm-protocol-docs:
|
|
if: github.event.repository.owner.login == 'fleetdm'
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
issues: write
|
|
steps:
|
|
- name: Harden Runner
|
|
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
|
|
with:
|
|
egress-policy: audit
|
|
- name: Check MS-MDE2 feed
|
|
uses: git-for-windows/rss-to-issues@07a39c615e25aaf70dc0fd84df7345ca8941d85f # v0.0.12
|
|
with:
|
|
github-token: ${{ secrets.GITHUB_TOKEN }}
|
|
feed: https://winprotocoldocs-bhdugrdyduf5h2e4.b02.azurefd.net/MS-MDE2/%5bMS-MDE2%5d.rss
|
|
prefix: "MDM: Review Microsoft MS-MDE2 Proto Change for new Request/Enrollment Versions: "
|
|
dry-run: false
|
|
max-age: 36h
|
|
labels: "#g-mdm"
|
|
url-only: true
|
|
- name: Check MS-MDM feed
|
|
uses: git-for-windows/rss-to-issues@07a39c615e25aaf70dc0fd84df7345ca8941d85f # v0.0.12
|
|
with:
|
|
github-token: ${{ secrets.GITHUB_TOKEN }}
|
|
feed: https://winprotocoldocs-bhdugrdyduf5h2e4.b02.azurefd.net/MS-MDM/%5bMS-MDM%5d.rss
|
|
prefix: "MDM: Review Microsoft MS-MDM Proto Change for compatibility: "
|
|
dry-run: false
|
|
max-age: 36h
|
|
labels: "#g-mdm"
|
|
url-only: true
|