Skip to content

traPのリポジトリに対するセキュリティ対応 #1051

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mathsuky merged 1 commit into from
May 27, 2026
Merged

traPのリポジトリに対するセキュリティ対応 #1051

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions .github/workflows/main.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,8 @@ jobs:
name: check yarn install
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
with:
node-version: 24
cache: 'yarn'
Expand All @@ -22,8 +22,8 @@ jobs:
runs-on: ubuntu-latest
needs: [packages]
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
with:
node-version: 24
cache: 'yarn'
Expand All @@ -39,8 +39,8 @@ jobs:
runs-on: ubuntu-latest
needs: [packages]
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
with:
node-version: 24
cache: 'yarn'
Expand Down
10 changes: 5 additions & 5 deletions .github/workflows/master.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,24 +18,24 @@ jobs:
packages: write

steps:
- uses: actions/checkout@v6
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

- name: Set up QEMU
uses: docker/setup-qemu-action@v3
uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0

- name: Set up Docker Buildx
id: buildx
uses: docker/setup-buildx-action@v3
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0

- name: Login to GitHub Container Registry
uses: docker/login-action@v3
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
with:
registry: ghcr.io
username: traptitech
password: ${{ secrets.GITHUB_TOKEN }}

- name: Build and push
uses: docker/build-push-action@v6
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
with:
context: .
push: true
Expand Down
16 changes: 8 additions & 8 deletions .github/workflows/release.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,8 +12,8 @@ jobs:
release:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
with:
node-version: 24
cache: "yarn"
Expand All @@ -28,7 +28,7 @@ jobs:
- name: Archive dist/
run: tar -zcvf ./dist.tar.gz ./dist
- name: Create Release and Upload Asset
uses: softprops/action-gh-release@v2
uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2.6.2
with:
files: ./dist.tar.gz
draft: false
Expand All @@ -42,22 +42,22 @@ jobs:
contents: read
packages: write
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
- name: Set IMAGE_TAG env
run: echo "IMAGE_TAG=${GITHUB_REF:11}" >> $GITHUB_ENV
- name: Set up QEMU
uses: docker/setup-qemu-action@v3
uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
- name: Set up Docker Buildx
id: buildx
uses: docker/setup-buildx-action@v3
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
- name: Login to GitHub Container Registry
uses: docker/login-action@v3
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
with:
registry: ghcr.io
username: traptitech
password: ${{ secrets.GITHUB_TOKEN }}
- name: Build and push
uses: docker/build-push-action@v6
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
with:
context: .
push: true
Expand Down
3 changes: 0 additions & 3 deletions .husky/pre-commit
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1 @@
#!/usr/bin/env sh
. "$(dirname -- "$0")/_/husky.sh"

yarn lint-staged
4 changes: 2 additions & 2 deletions Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM --platform=$BUILDPLATFORM node:24-alpine AS build
FROM --platform=$BUILDPLATFORM node:24-alpine@sha256:2bdb65ed1dab192432bc31c95f94155ca5ad7fc1392fb7eb7526ab682fa5bf14 AS build
WORKDIR /app

RUN corepack enable
Expand All @@ -11,7 +11,7 @@ COPY . .
RUN NODE_ENV=production yarn build

# 本番環境
FROM caddy:2.10.0-alpine
FROM caddy:2.10.0-alpine@sha256:ae4458638da8e1a91aafffb231c5f8778e964bca650c8a8cb23a7e8ac557aa3c
EXPOSE 80
COPY Caddyfile /etc/caddy/Caddyfile
COPY --from=build /app/dist /usr/share/caddy
74 changes: 37 additions & 37 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,46 +11,46 @@
"api:build": "./scripts/gen-api.sh"
},
"dependencies": {
"@cloudcmd/clipboard": "^2.0.0",
"axios": "^1.8.2",
"csv-parse": "^5.5.6",
"direct-vuex": "^0.12.1",
"highlight.js": "^11.6.0",
"markdown-it": "^13.0.1",
"markdown-it-link-attributes": "^4.0.0",
"moment": "^2.30.1",
"reflect-metadata": "^0.1.13",
"vue": "^2.7.14",
"vue-class-component": "^7.2.6",
"vue-property-decorator": "^9.1.2",
"vue-router": "^3.5.3",
"vuetify": "^2.6.12",
"vuex": "^3.6.2"
"@cloudcmd/clipboard": "2.0.0",
"axios": "1.9.0",
"csv-parse": "5.6.0",
"direct-vuex": "0.12.1",
"highlight.js": "11.11.1",
"markdown-it": "13.0.2",
"markdown-it-link-attributes": "4.0.1",
"moment": "2.30.1",
"reflect-metadata": "0.1.14",
"vue": "2.7.16",
"vue-class-component": "7.2.6",
"vue-property-decorator": "9.1.2",
"vue-router": "3.6.5",
"vuetify": "2.6.13",
"vuex": "3.6.2"
},
"devDependencies": {
"@iconify/vue2": "^2.1.0",
"@mdi/font": "^7.4.47",
"@openapitools/openapi-generator-cli": "^2.4.26",
"@types/highlight.js": "^10.1.0",
"@types/markdown-it": "^12.2.3",
"@typescript-eslint/eslint-plugin": "^6.7.3",
"@typescript-eslint/parser": "^8.33.0",
"@vitejs/plugin-vue2": "^2.2.0",
"@vue/eslint-config-prettier": "^8.0.0",
"@vue/eslint-config-standard": "^8.0.1",
"@vue/eslint-config-typescript": "^13.0.0",
"eslint": "^8.50.0",
"eslint-config-prettier": "^9.1.0",
"eslint-plugin-prettier": "^4.2.1",
"eslint-plugin-vue": "^9.19.2",
"husky": "^9.1.7",
"lint-staged": "^15.2.0",
"prettier": "^2.8.8",
"sass": "~1.69",
"@iconify/vue2": "2.1.0",
"@mdi/font": "7.4.47",
"@openapitools/openapi-generator-cli": "2.20.2",
"@types/highlight.js": "10.1.0",
"@types/markdown-it": "12.2.3",
"@typescript-eslint/eslint-plugin": "6.21.0",
"@typescript-eslint/parser": "8.34.0",
"@vitejs/plugin-vue2": "2.3.3",
"@vue/eslint-config-prettier": "8.0.0",
"@vue/eslint-config-standard": "8.0.1",
"@vue/eslint-config-typescript": "13.0.0",
"eslint": "8.57.1",
"eslint-config-prettier": "9.1.0",
"eslint-plugin-prettier": "4.2.1",
"eslint-plugin-vue": "9.33.0",
"husky": "9.1.7",
"lint-staged": "15.5.2",
"prettier": "2.8.8",
"sass": "1.69.7",
"typescript": "5.7.2",
"unplugin-vue-components": "^0.27.4",
"vite": "^4.5.5",
"vue-template-compiler": "^2.7.14"
"unplugin-vue-components": "0.27.5",
"vite": "4.5.14",
"vue-template-compiler": "2.7.16"
},
"browserslist": [
"> 1%",
Expand Down
Loading
Loading