From 0b10400bb767ce7d1e1136feffcd183d5b79196d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 23 Jun 2026 10:38:20 +0000 Subject: [PATCH 1/3] ci(deps): bump actions/checkout from 4 to 7 Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/codacy.yml | 2 +- .github/workflows/dependency-review.yml | 2 +- .github/workflows/docker-image.yml | 2 +- .github/workflows/fibonrose-validator.yml | 2 +- .github/workflows/generator-generic-ossf-slsa3-publish.yml | 2 +- .github/workflows/neuralegion.yml | 2 +- .github/workflows/nextjs.yml | 2 +- .github/workflows/node.js.yml | 2 +- .github/workflows/security.yml | 6 +++--- .github/workflows/summary.yml | 2 +- .github/workflows/super-linter.yml | 2 +- 11 files changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/codacy.yml b/.github/workflows/codacy.yml index c5a54a5..e34c1dc 100644 --- a/.github/workflows/codacy.yml +++ b/.github/workflows/codacy.yml @@ -36,7 +36,7 @@ jobs: steps: # Checkout the repository to the GitHub Actions runner - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 # Execute Codacy Analysis CLI and generate a SARIF output with the security issues identified during the analysis - name: Run Codacy Analysis CLI diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index d19e21b..4782fa6 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -28,7 +28,7 @@ jobs: runs-on: ubuntu-latest steps: - name: 'Checkout repository' - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: 'Dependency Review' uses: actions/dependency-review-action@v4 # Commonly enabled options, see https://github.com/actions/dependency-review-action#configuration-options for all available options. diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index 3f53646..7bb70dd 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -13,6 +13,6 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Build the Docker image run: docker build . --file Dockerfile --tag my-image-name:$(date +%s) diff --git a/.github/workflows/fibonrose-validator.yml b/.github/workflows/fibonrose-validator.yml index 01be2d8..53078fa 100644 --- a/.github/workflows/fibonrose-validator.yml +++ b/.github/workflows/fibonrose-validator.yml @@ -17,7 +17,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v4 diff --git a/.github/workflows/generator-generic-ossf-slsa3-publish.yml b/.github/workflows/generator-generic-ossf-slsa3-publish.yml index 35c829b..506fa84 100644 --- a/.github/workflows/generator-generic-ossf-slsa3-publish.yml +++ b/.github/workflows/generator-generic-ossf-slsa3-publish.yml @@ -23,7 +23,7 @@ jobs: digests: ${{ steps.hash.outputs.digests }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 # ======================================================== # diff --git a/.github/workflows/neuralegion.yml b/.github/workflows/neuralegion.yml index 5fee27b..71df288 100644 --- a/.github/workflows/neuralegion.yml +++ b/.github/workflows/neuralegion.yml @@ -162,7 +162,7 @@ jobs: runs-on: ubuntu-18.04 name: A job to run a Nexploit scan steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Start Nexploit Scan 🏁 id: start uses: NeuraLegion/run-scan@29ebd17b4fd6292ce7a238a59401668953b37fbe diff --git a/.github/workflows/nextjs.yml b/.github/workflows/nextjs.yml index fa8804d..0b63025 100644 --- a/.github/workflows/nextjs.yml +++ b/.github/workflows/nextjs.yml @@ -30,7 +30,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Detect package manager id: detect-package-manager run: | diff --git a/.github/workflows/node.js.yml b/.github/workflows/node.js.yml index 2284b93..f622d3b 100644 --- a/.github/workflows/node.js.yml +++ b/.github/workflows/node.js.yml @@ -20,7 +20,7 @@ jobs: # See supported Node.js release schedule at https://nodejs.org/en/about/releases/ steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Use Node.js ${{ matrix.node-version }} uses: actions/setup-node@v4 with: diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 7a3a0c4..6ab0cac 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -25,7 +25,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Initialize CodeQL uses: github/codeql-action/init@v3 @@ -47,7 +47,7 @@ jobs: if: github.event_name == 'pull_request' steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Dependency Review uses: actions/dependency-review-action@v4 @@ -60,7 +60,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup pnpm uses: pnpm/action-setup@v6 diff --git a/.github/workflows/summary.yml b/.github/workflows/summary.yml index 48c392f..c204da2 100644 --- a/.github/workflows/summary.yml +++ b/.github/workflows/summary.yml @@ -14,7 +14,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Run AI inference id: inference diff --git a/.github/workflows/super-linter.yml b/.github/workflows/super-linter.yml index af6a923..9bb265b 100644 --- a/.github/workflows/super-linter.yml +++ b/.github/workflows/super-linter.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: # Full git history is needed to get a proper list of changed files within `super-linter` fetch-depth: 0 From 3d7b7929646f2622114125e0f16e577e1a3adf3e Mon Sep 17 00:00:00 2001 From: Pmaster-dev <8pinkycollie8@gmail.com> Date: Mon, 20 Jul 2026 22:18:55 -0500 Subject: [PATCH 2/3] Delete neuralegion.yml --- .github/workflows/neuralegion.yml | 175 ------------------------------ 1 file changed, 175 deletions(-) delete mode 100644 .github/workflows/neuralegion.yml diff --git a/.github/workflows/neuralegion.yml b/.github/workflows/neuralegion.yml deleted file mode 100644 index 71df288..0000000 --- a/.github/workflows/neuralegion.yml +++ /dev/null @@ -1,175 +0,0 @@ -# This workflow uses actions that are not certified by GitHub. -# They are provided by a third-party and are governed by -# separate terms of service, privacy policy, and support -# documentation. -# -# Run a Nexploit Scan -# This action runs a new security scan in Nexploit, or reruns an existing one. -# Build Secure Apps & APIs. Fast. -# [NeuraLegion](https://www.neuralegion.com) is a powerful dynamic application & API security testing (DAST) platform that security teams trust and developers love. -# Automatically Tests Every Aspect of Your Apps & APIs -# Scans any target, whether Web Apps, APIs (REST. & SOAP, GraphQL & more), Web sockets or mobile, providing actionable reports -# Seamlessly integrates with the Tools and Workflows You Already Use -# -# NeuraLegion works with your existing CI/CD pipelines – trigger scans on every commit, pull request or build with unit testing. -# Spin-Up, Configure and Control Scans with Code -# One file. One command. One scan. No UI needed. -# -# Super-Fast Scans -# -# Interacts with applications and APIs, instead of just crawling them and guessing. -# Scans are fast as our AI-powered engine can understand application architecture and generate sophisticated and targeted attacks. -# -# No False Positives -# -# Stop chasing ghosts and wasting time. NeuraLegion doesn’t return false positives, so you can focus on releasing code. -# -# Comprehensive Security Testing -# -# NeuraLegion tests for all common vulnerabilities, such as SQL injection, CSRF, XSS, and XXE -- as well as uncommon vulnerabilities, such as business logic vulnerabilities. -# -# More information is available on NeuraLegion’s: -# * [Website](https://www.neuralegion.com/) -# * [Knowledge base](https://docs.neuralegion.com/docs/quickstart) -# * [YouTube channel](https://www.youtube.com/channel/UCoIC0T1pmozq3eKLsUR2uUw) -# * [GitHub Actions](https://github.com/marketplace?query=neuralegion+) -# -# Inputs -# -# `name` -# -# **Required**. Scan name. -# -# _Example:_ `name: GitHub scan ${{ github.sha }}` -# -# `api_token` -# -# **Required**. Your Nexploit API authorization token (key). You can generate it in the **Organization** section on [nexploit.app](https://nexploit.app/login). Find more information [here](https://kb.neuralegion.com/#/guide/np-web-ui/advanced-set-up/managing-org?id=managing-organization-apicli-authentication-tokens). -# -# _Example:_ `api_token: ${{ secrets.NEXPLOIT_TOKEN }}` -# -# `restart_scan` -# -# **Required** when restarting an existing scan by its ID. You can get the scan ID in the Scans section on [nexploit.app](https://nexploit.app/login).
Please make sure to only use the necessary parameters. Otherwise, you will get a response with the parameter usage requirements. -# -# _Example:_ `restart_scan: ai3LG8DmVn9Rn1YeqCNRGQ)` -# -# `discovery_types` -# -# **Required**. Array of discovery types. The following types are available: -# * `archive` - uses an uploaded HAR-file for a scan -# * `crawler` - uses a crawler to define the attack surface for a scan -# * `oas` - uses an uploaded OpenAPI schema for a scan
-# If no discovery type is specified, `crawler` is applied by default. -# -# _Example:_ -# -# ```yml -# discovery_types: | -# [ "crawler", "archive" ] -# ``` -# -# `file_id` -# -# **Required** if the discovery type is set to `archive` or `oas`. ID of a HAR-file or an OpenAPI schema you want to use for a scan. You can get the ID of an uploaded HAR-file or an OpenAPI schema in the **Storage** section on [nexploit.app](https://nexploit.app/login). -# -# _Example:_ -# -# ``` -# FILE_ID=$(nexploit-cli archive:upload \ -# --token ${{ secrets.NEXPLOIT_TOKEN }} \ -# --discard true \ -# ./example.har) -# ``` -# -# `crawler_urls` -# -# **Required** if the discovery type is set to `crawler`. Target URLs to be used by the crawler to define the attack surface. -# -# _Example:_ -# -# ``` -# crawler_urls: | -# [ "http://vulnerable-bank.com" ] -# ``` -# -# `hosts_filter` -# -# **Required** when the the discovery type is set to `archive`. Allows selecting specific hosts for a scan. -# -# Outputs -# -# `url` -# -# Url of the resulting scan -# -# `id` -# -# ID of the created scan. This ID could then be used to restart the scan, or for the following GitHub actions: -# * [Nexploit Wait for Issues](https://github.com/marketplace/actions/nexploit-wait-for-issues) -# * [Nexploit Stop Scan](https://github.com/marketplace/actions/nexploit-stop-scan) -# -# Example usage -# -# Start a new scan with parameters -# -# ```yml -# steps: -# - name: Start Nexploit Scan -# id: start -# uses: NeuraLegion/run-scan@29ebd17b4fd6292ce7a238a59401668953b37fbe -# with: -# api_token: ${{ secrets.NEXPLOIT_TOKEN }} -# name: GitHub scan ${{ github.sha }} -# discovery_types: | -# [ "crawler", "archive" ] -# crawler_urls: | -# [ "http://vulnerable-bank.com" ] -# file_id: LiYknMYSdbSZbqgMaC9Sj -# hosts_filter: | -# [ ] -# - name: Get the output scan url -# run: echo "The scan was started on ${{ steps.start.outputs.url }}" -# ``` -# -# Restart an existing scan -# -# ```yml -# steps: -# - name: Start Nexploit Scan -# id: start -# uses: NeuraLegion/run-scan@29ebd17b4fd6292ce7a238a59401668953b37fbe -# with: -# api_token: ${{ secrets.NEXPLOIT_TOKEN }} -# name: GitHub scan ${{ github.sha }} -# restart_scan: ai3LG8DmVn9Rn1YeqCNRGQ -# - name: Get the output scan url -# run: echo "The scan was started on ${{ steps.start.outputs.url }}" - - -name: "NeuraLegion" - -on: - push: - branches: [ "main" ] - pull_request: - branches: [ "main" ] - schedule: - - cron: '19 11 * * 4' - -jobs: - neuralegion_scan: - runs-on: ubuntu-18.04 - name: A job to run a Nexploit scan - steps: - - uses: actions/checkout@v7 - - name: Start Nexploit Scan 🏁 - id: start - uses: NeuraLegion/run-scan@29ebd17b4fd6292ce7a238a59401668953b37fbe - with: - api_token: ${{ secrets.NEURALEGION_TOKEN }} - name: GitHub scan ${{ github.sha }} - discovery_types: | - [ "crawler" ] - crawler_urls: | - [ "https://brokencrystals.com" ] # ✏️ Update this to the url you wish to scan From aa77764eb43acb5eef1ee5136d4c1fcdc60aea92 Mon Sep 17 00:00:00 2001 From: Pmaster-dev <8pinkycollie8@gmail.com> Date: Mon, 20 Jul 2026 22:19:12 -0500 Subject: [PATCH 3/3] Delete nextjs.yml --- .github/workflows/nextjs.yml | 93 ------------------------------------ 1 file changed, 93 deletions(-) delete mode 100644 .github/workflows/nextjs.yml diff --git a/.github/workflows/nextjs.yml b/.github/workflows/nextjs.yml deleted file mode 100644 index 0e1710b..0000000 --- a/.github/workflows/nextjs.yml +++ /dev/null @@ -1,93 +0,0 @@ -# Sample workflow for building and deploying a Next.js site to GitHub Pages -# -# To get started with Next.js see: https://nextjs.org/docs/getting-started -# -name: Deploy Next.js site to Pages - -on: - # Runs on pushes targeting the default branch - push: - branches: ["main"] - - # Allows you to run this workflow manually from the Actions tab - workflow_dispatch: - -# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages -permissions: - contents: read - pages: write - id-token: write - -# Allow only one concurrent deployment, skipping runs queued between the run in-progress and latest queued. -# However, do NOT cancel in-progress runs as we want to allow these production deployments to complete. -concurrency: - group: "pages" - cancel-in-progress: false - -jobs: - # Build job - build: - runs-on: ubuntu-latest - steps: - - name: Checkout - uses: actions/checkout@v7 - - name: Detect package manager - id: detect-package-manager - run: | - if [ -f "${{ github.workspace }}/yarn.lock" ]; then - echo "manager=yarn" >> $GITHUB_OUTPUT - echo "command=install" >> $GITHUB_OUTPUT - echo "runner=yarn" >> $GITHUB_OUTPUT - exit 0 - elif [ -f "${{ github.workspace }}/package.json" ]; then - echo "manager=npm" >> $GITHUB_OUTPUT - echo "command=ci" >> $GITHUB_OUTPUT - echo "runner=npx --no-install" >> $GITHUB_OUTPUT - exit 0 - else - echo "Unable to determine package manager" - exit 1 - fi - - name: Setup Node - uses: actions/setup-node@v6 - with: - node-version: "20" - cache: ${{ steps.detect-package-manager.outputs.manager }} - - name: Setup Pages - uses: actions/configure-pages@v5 - with: - # Automatically inject basePath in your Next.js configuration file and disable - # server side image optimization (https://nextjs.org/docs/api-reference/next/image#unoptimized). - # - # You may remove this line if you want to manage the configuration yourself. - static_site_generator: next - - name: Restore cache - uses: actions/cache@v4 - with: - path: | - .next/cache - # Generate a new cache whenever packages or source files change. - key: ${{ runner.os }}-nextjs-${{ hashFiles('**/package-lock.json', '**/yarn.lock') }}-${{ hashFiles('**.[jt]s', '**.[jt]sx') }} - # If source files changed but packages didn't, rebuild from a prior cache. - restore-keys: | - ${{ runner.os }}-nextjs-${{ hashFiles('**/package-lock.json', '**/yarn.lock') }}- - - name: Install dependencies - run: ${{ steps.detect-package-manager.outputs.manager }} ${{ steps.detect-package-manager.outputs.command }} - - name: Build with Next.js - run: ${{ steps.detect-package-manager.outputs.runner }} next build - - name: Upload artifact - uses: actions/upload-pages-artifact@v5 - with: - path: ./out - - # Deployment job - deploy: - environment: - name: github-pages - url: ${{ steps.deployment.outputs.page_url }} - runs-on: ubuntu-latest - needs: build - steps: - - name: Deploy to GitHub Pages - id: deployment - uses: actions/deploy-pages@v5