fix(web): proxy /query in the Vite dev server #681
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Security Checks | |
| on: | |
| push: | |
| branches: [ main ] | |
| paths-ignore: | |
| - '.github/CODEOWNERS' | |
| - '.github/SECURITY.md' | |
| - '.slsa-goreleaser/**' | |
| - '.gitignore' | |
| - 'docs/**' | |
| - '**.md' | |
| pull_request: | |
| branches: [ main ] | |
| paths-ignore: | |
| - '.github/CODEOWNERS' | |
| - '.github/SECURITY.md' | |
| - '.slsa-goreleaser/**' | |
| - '.gitignore' | |
| - 'docs/**' | |
| - '**.md' | |
| schedule: | |
| - cron: '0 0 * * 1' # Weekly on Monday | |
| permissions: | |
| contents: read | |
| security-events: write | |
| # Restrict other permissions | |
| actions: none | |
| checks: none | |
| deployments: none | |
| issues: none | |
| packages: none | |
| pages: none | |
| pull-requests: none | |
| repository-projects: none | |
| statuses: none | |
| jobs: | |
| license-check: | |
| name: License Compliance Check | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v5 | |
| - name: Set up Go | |
| uses: actions/setup-go@v6 | |
| with: | |
| go-version: '1.24' | |
| - name: Install go-licenses | |
| run: go install github.com/google/go-licenses@latest | |
| - name: Check licenses | |
| run: | | |
| # MPL-2.0 is reciprocal but file-level, which is acceptable for our use | |
| # Only check for forbidden and restricted licenses | |
| go-licenses check ./cmd/... ./internal/... ./pkg/... --disallowed_types=forbidden,restricted | |
| sbom: | |
| name: Generate SBOM | |
| runs-on: ubuntu-latest | |
| # Only generate SBOM on main branch or tags, not on PRs | |
| if: github.event_name == 'push' && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')) | |
| steps: | |
| - uses: actions/checkout@v5 | |
| - name: Generate SBOM | |
| uses: anchore/sbom-action@v0 | |
| with: | |
| artifact-name: sbom-${{ github.sha }}.json | |
| format: spdx-json | |
| output-file: sbom.spdx.json | |
| - name: Upload SBOM | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: sbom | |
| path: sbom.spdx.json | |
| retention-days: 30 | |
| dependency-track: | |
| name: Track Dependencies | |
| runs-on: ubuntu-latest | |
| # Skip for PRs from forks and for repositories that don't have dependency graph enabled | |
| if: | | |
| github.repository == 'guidewire-oss/fern-platform' && | |
| (github.event_name == 'push' || (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository)) | |
| # Add required permissions for dependency submission | |
| permissions: | |
| contents: write # Required to submit dependencies | |
| security-events: write # Required for dependency submission API | |
| steps: | |
| - uses: actions/checkout@v5 | |
| - name: Set up Go | |
| uses: actions/setup-go@v6 | |
| with: | |
| go-version: '1.24' | |
| - name: Submit Dependency Snapshot | |
| uses: actions/go-dependency-submission@v2 | |
| with: | |
| go-mod-path: ./go.mod |