diff --git a/.github/workflows/codacy.yml b/.github/workflows/codacy.yml
index c5a54a5..e34c1dc 100644
--- a/.github/workflows/codacy.yml
+++ b/.github/workflows/codacy.yml
@@ -36,7 +36,7 @@ jobs:
steps:
# Checkout the repository to the GitHub Actions runner
- name: Checkout code
- uses: actions/checkout@v4
+ uses: actions/checkout@v7
# Execute Codacy Analysis CLI and generate a SARIF output with the security issues identified during the analysis
- name: Run Codacy Analysis CLI
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index d19e21b..4782fa6 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -28,7 +28,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: 'Checkout repository'
- uses: actions/checkout@v4
+ uses: actions/checkout@v7
- name: 'Dependency Review'
uses: actions/dependency-review-action@v4
# Commonly enabled options, see https://github.com/actions/dependency-review-action#configuration-options for all available options.
diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml
index 3f53646..7bb70dd 100644
--- a/.github/workflows/docker-image.yml
+++ b/.github/workflows/docker-image.yml
@@ -13,6 +13,6 @@ jobs:
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v7
- name: Build the Docker image
run: docker build . --file Dockerfile --tag my-image-name:$(date +%s)
diff --git a/.github/workflows/fibonrose-validator.yml b/.github/workflows/fibonrose-validator.yml
index 52528ca..403c757 100644
--- a/.github/workflows/fibonrose-validator.yml
+++ b/.github/workflows/fibonrose-validator.yml
@@ -17,7 +17,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@v4
+ uses: actions/checkout@v7
- name: Setup Node.js
uses: actions/setup-node@v6
diff --git a/.github/workflows/generator-generic-ossf-slsa3-publish.yml b/.github/workflows/generator-generic-ossf-slsa3-publish.yml
index 35c829b..506fa84 100644
--- a/.github/workflows/generator-generic-ossf-slsa3-publish.yml
+++ b/.github/workflows/generator-generic-ossf-slsa3-publish.yml
@@ -23,7 +23,7 @@ jobs:
digests: ${{ steps.hash.outputs.digests }}
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v7
# ========================================================
#
diff --git a/.github/workflows/neuralegion.yml b/.github/workflows/neuralegion.yml
deleted file mode 100644
index 5fee27b..0000000
--- a/.github/workflows/neuralegion.yml
+++ /dev/null
@@ -1,175 +0,0 @@
-# This workflow uses actions that are not certified by GitHub.
-# They are provided by a third-party and are governed by
-# separate terms of service, privacy policy, and support
-# documentation.
-#
-# Run a Nexploit Scan
-# This action runs a new security scan in Nexploit, or reruns an existing one.
-# Build Secure Apps & APIs. Fast.
-# [NeuraLegion](https://www.neuralegion.com) is a powerful dynamic application & API security testing (DAST) platform that security teams trust and developers love.
-# Automatically Tests Every Aspect of Your Apps & APIs
-# Scans any target, whether Web Apps, APIs (REST. & SOAP, GraphQL & more), Web sockets or mobile, providing actionable reports
-# Seamlessly integrates with the Tools and Workflows You Already Use
-#
-# NeuraLegion works with your existing CI/CD pipelines – trigger scans on every commit, pull request or build with unit testing.
-# Spin-Up, Configure and Control Scans with Code
-# One file. One command. One scan. No UI needed.
-#
-# Super-Fast Scans
-#
-# Interacts with applications and APIs, instead of just crawling them and guessing.
-# Scans are fast as our AI-powered engine can understand application architecture and generate sophisticated and targeted attacks.
-#
-# No False Positives
-#
-# Stop chasing ghosts and wasting time. NeuraLegion doesn’t return false positives, so you can focus on releasing code.
-#
-# Comprehensive Security Testing
-#
-# NeuraLegion tests for all common vulnerabilities, such as SQL injection, CSRF, XSS, and XXE -- as well as uncommon vulnerabilities, such as business logic vulnerabilities.
-#
-# More information is available on NeuraLegion’s:
-# * [Website](https://www.neuralegion.com/)
-# * [Knowledge base](https://docs.neuralegion.com/docs/quickstart)
-# * [YouTube channel](https://www.youtube.com/channel/UCoIC0T1pmozq3eKLsUR2uUw)
-# * [GitHub Actions](https://github.com/marketplace?query=neuralegion+)
-#
-# Inputs
-#
-# `name`
-#
-# **Required**. Scan name.
-#
-# _Example:_ `name: GitHub scan ${{ github.sha }}`
-#
-# `api_token`
-#
-# **Required**. Your Nexploit API authorization token (key). You can generate it in the **Organization** section on [nexploit.app](https://nexploit.app/login). Find more information [here](https://kb.neuralegion.com/#/guide/np-web-ui/advanced-set-up/managing-org?id=managing-organization-apicli-authentication-tokens).
-#
-# _Example:_ `api_token: ${{ secrets.NEXPLOIT_TOKEN }}`
-#
-# `restart_scan`
-#
-# **Required** when restarting an existing scan by its ID. You can get the scan ID in the Scans section on [nexploit.app](https://nexploit.app/login).
Please make sure to only use the necessary parameters. Otherwise, you will get a response with the parameter usage requirements.
-#
-# _Example:_ `restart_scan: ai3LG8DmVn9Rn1YeqCNRGQ)`
-#
-# `discovery_types`
-#
-# **Required**. Array of discovery types. The following types are available:
-# * `archive` - uses an uploaded HAR-file for a scan
-# * `crawler` - uses a crawler to define the attack surface for a scan
-# * `oas` - uses an uploaded OpenAPI schema for a scan
-# If no discovery type is specified, `crawler` is applied by default.
-#
-# _Example:_
-#
-# ```yml
-# discovery_types: |
-# [ "crawler", "archive" ]
-# ```
-#
-# `file_id`
-#
-# **Required** if the discovery type is set to `archive` or `oas`. ID of a HAR-file or an OpenAPI schema you want to use for a scan. You can get the ID of an uploaded HAR-file or an OpenAPI schema in the **Storage** section on [nexploit.app](https://nexploit.app/login).
-#
-# _Example:_
-#
-# ```
-# FILE_ID=$(nexploit-cli archive:upload \
-# --token ${{ secrets.NEXPLOIT_TOKEN }} \
-# --discard true \
-# ./example.har)
-# ```
-#
-# `crawler_urls`
-#
-# **Required** if the discovery type is set to `crawler`. Target URLs to be used by the crawler to define the attack surface.
-#
-# _Example:_
-#
-# ```
-# crawler_urls: |
-# [ "http://vulnerable-bank.com" ]
-# ```
-#
-# `hosts_filter`
-#
-# **Required** when the the discovery type is set to `archive`. Allows selecting specific hosts for a scan.
-#
-# Outputs
-#
-# `url`
-#
-# Url of the resulting scan
-#
-# `id`
-#
-# ID of the created scan. This ID could then be used to restart the scan, or for the following GitHub actions:
-# * [Nexploit Wait for Issues](https://github.com/marketplace/actions/nexploit-wait-for-issues)
-# * [Nexploit Stop Scan](https://github.com/marketplace/actions/nexploit-stop-scan)
-#
-# Example usage
-#
-# Start a new scan with parameters
-#
-# ```yml
-# steps:
-# - name: Start Nexploit Scan
-# id: start
-# uses: NeuraLegion/run-scan@29ebd17b4fd6292ce7a238a59401668953b37fbe
-# with:
-# api_token: ${{ secrets.NEXPLOIT_TOKEN }}
-# name: GitHub scan ${{ github.sha }}
-# discovery_types: |
-# [ "crawler", "archive" ]
-# crawler_urls: |
-# [ "http://vulnerable-bank.com" ]
-# file_id: LiYknMYSdbSZbqgMaC9Sj
-# hosts_filter: |
-# [ ]
-# - name: Get the output scan url
-# run: echo "The scan was started on ${{ steps.start.outputs.url }}"
-# ```
-#
-# Restart an existing scan
-#
-# ```yml
-# steps:
-# - name: Start Nexploit Scan
-# id: start
-# uses: NeuraLegion/run-scan@29ebd17b4fd6292ce7a238a59401668953b37fbe
-# with:
-# api_token: ${{ secrets.NEXPLOIT_TOKEN }}
-# name: GitHub scan ${{ github.sha }}
-# restart_scan: ai3LG8DmVn9Rn1YeqCNRGQ
-# - name: Get the output scan url
-# run: echo "The scan was started on ${{ steps.start.outputs.url }}"
-
-
-name: "NeuraLegion"
-
-on:
- push:
- branches: [ "main" ]
- pull_request:
- branches: [ "main" ]
- schedule:
- - cron: '19 11 * * 4'
-
-jobs:
- neuralegion_scan:
- runs-on: ubuntu-18.04
- name: A job to run a Nexploit scan
- steps:
- - uses: actions/checkout@v4
- - name: Start Nexploit Scan 🏁
- id: start
- uses: NeuraLegion/run-scan@29ebd17b4fd6292ce7a238a59401668953b37fbe
- with:
- api_token: ${{ secrets.NEURALEGION_TOKEN }}
- name: GitHub scan ${{ github.sha }}
- discovery_types: |
- [ "crawler" ]
- crawler_urls: |
- [ "https://brokencrystals.com" ] # ✏️ Update this to the url you wish to scan
diff --git a/.github/workflows/nextjs.yml b/.github/workflows/nextjs.yml
deleted file mode 100644
index 4d91142..0000000
--- a/.github/workflows/nextjs.yml
+++ /dev/null
@@ -1,93 +0,0 @@
-# Sample workflow for building and deploying a Next.js site to GitHub Pages
-#
-# To get started with Next.js see: https://nextjs.org/docs/getting-started
-#
-name: Deploy Next.js site to Pages
-
-on:
- # Runs on pushes targeting the default branch
- push:
- branches: ["main"]
-
- # Allows you to run this workflow manually from the Actions tab
- workflow_dispatch:
-
-# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
-permissions:
- contents: read
- pages: write
- id-token: write
-
-# Allow only one concurrent deployment, skipping runs queued between the run in-progress and latest queued.
-# However, do NOT cancel in-progress runs as we want to allow these production deployments to complete.
-concurrency:
- group: "pages"
- cancel-in-progress: false
-
-jobs:
- # Build job
- build:
- runs-on: ubuntu-latest
- steps:
- - name: Checkout
- uses: actions/checkout@v4
- - name: Detect package manager
- id: detect-package-manager
- run: |
- if [ -f "${{ github.workspace }}/yarn.lock" ]; then
- echo "manager=yarn" >> $GITHUB_OUTPUT
- echo "command=install" >> $GITHUB_OUTPUT
- echo "runner=yarn" >> $GITHUB_OUTPUT
- exit 0
- elif [ -f "${{ github.workspace }}/package.json" ]; then
- echo "manager=npm" >> $GITHUB_OUTPUT
- echo "command=ci" >> $GITHUB_OUTPUT
- echo "runner=npx --no-install" >> $GITHUB_OUTPUT
- exit 0
- else
- echo "Unable to determine package manager"
- exit 1
- fi
- - name: Setup Node
- uses: actions/setup-node@v6
- with:
- node-version: "20"
- cache: ${{ steps.detect-package-manager.outputs.manager }}
- - name: Setup Pages
- uses: actions/configure-pages@v5
- with:
- # Automatically inject basePath in your Next.js configuration file and disable
- # server side image optimization (https://nextjs.org/docs/api-reference/next/image#unoptimized).
- #
- # You may remove this line if you want to manage the configuration yourself.
- static_site_generator: next
- - name: Restore cache
- uses: actions/cache@v4
- with:
- path: |
- .next/cache
- # Generate a new cache whenever packages or source files change.
- key: ${{ runner.os }}-nextjs-${{ hashFiles('**/package-lock.json', '**/yarn.lock') }}-${{ hashFiles('**.[jt]s', '**.[jt]sx') }}
- # If source files changed but packages didn't, rebuild from a prior cache.
- restore-keys: |
- ${{ runner.os }}-nextjs-${{ hashFiles('**/package-lock.json', '**/yarn.lock') }}-
- - name: Install dependencies
- run: ${{ steps.detect-package-manager.outputs.manager }} ${{ steps.detect-package-manager.outputs.command }}
- - name: Build with Next.js
- run: ${{ steps.detect-package-manager.outputs.runner }} next build
- - name: Upload artifact
- uses: actions/upload-pages-artifact@v5
- with:
- path: ./out
-
- # Deployment job
- deploy:
- environment:
- name: github-pages
- url: ${{ steps.deployment.outputs.page_url }}
- runs-on: ubuntu-latest
- needs: build
- steps:
- - name: Deploy to GitHub Pages
- id: deployment
- uses: actions/deploy-pages@v5
diff --git a/.github/workflows/node.js.yml b/.github/workflows/node.js.yml
index 30a81f6..1b89547 100644
--- a/.github/workflows/node.js.yml
+++ b/.github/workflows/node.js.yml
@@ -20,7 +20,7 @@ jobs:
# See supported Node.js release schedule at https://nodejs.org/en/about/releases/
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v7
- name: Use Node.js ${{ matrix.node-version }}
uses: actions/setup-node@v6
with:
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 1b422a2..07b268e 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -25,7 +25,7 @@ jobs:
steps:
- name: Checkout code
- uses: actions/checkout@v4
+ uses: actions/checkout@v7
- name: Initialize CodeQL
uses: github/codeql-action/init@v3
@@ -47,7 +47,7 @@ jobs:
if: github.event_name == 'pull_request'
steps:
- name: Checkout code
- uses: actions/checkout@v4
+ uses: actions/checkout@v7
- name: Dependency Review
uses: actions/dependency-review-action@v4
@@ -60,7 +60,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout code
- uses: actions/checkout@v4
+ uses: actions/checkout@v7
- name: Setup pnpm
uses: pnpm/action-setup@v6
diff --git a/.github/workflows/summary.yml b/.github/workflows/summary.yml
index 48c392f..c204da2 100644
--- a/.github/workflows/summary.yml
+++ b/.github/workflows/summary.yml
@@ -14,7 +14,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@v4
+ uses: actions/checkout@v7
- name: Run AI inference
id: inference
diff --git a/.github/workflows/super-linter.yml b/.github/workflows/super-linter.yml
index af6a923..9bb265b 100644
--- a/.github/workflows/super-linter.yml
+++ b/.github/workflows/super-linter.yml
@@ -16,7 +16,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout code
- uses: actions/checkout@v4
+ uses: actions/checkout@v7
with:
# Full git history is needed to get a proper list of changed files within `super-linter`
fetch-depth: 0