bitwarden/gh-actions

---

Bitwarden Client Applications

This repository houses all Bitwarden client applications except the Mobile application.

Please refer to the Clients section of the Contributing Documentation for build instructions, recommended tooling, code style tips, and lots of other great information to get you started.

Related projects:

• bitwarden/server: The core infrastructure backend (API, database, Docker, etc).
• bitwarden/mobile: The mobile app vault (iOS and Android).
• bitwarden/directory-connector: A tool for syncing a directory (AD, LDAP, Azure, G Suite, Okta) to an organization.

We're Hiring!

Interested in contributing in a big way? Consider joining our team! We're hiring for many positions. Please take a look at our Careers page to see what opportunities are currently open as well as what it's like to work at Bitwarden.

Contribute

Code contributions are welcome! Please commit any pull requests against the main branch. Learn more about how to contribute by reading the Contributing Guidelines. Check out the Contributing Documentation for how to get started with your first contribution.

Security audits and feedback are welcome. Please open an issue or email us privately if the report is sensitive in nature. You can read our security policy in the SECURITY.md file.

gh-actions's Issues

Relax "Run in step # of job key '...' should be a single line"

I believe the following step should not trigger an error:

- name: Set DataDog version
  run: >
    cat <<<
    $(jq '.DD_VERSION = "${{ inputs.version }}"' app/datadog.json)
    > app/datadog.json

The command above is collapsed by the YAML processor down to a single line, replacing newlines with spaces:

cat <<< $(jq '.DD_VERSION = "${{ inputs.version }}"' app/datadog.json) > app/datadog.json

I don't understand why I'm getting a linter error for this step:

Looking at the linter source code, I'm not entirely sure how it works or what's it's even supposed to achieve. Like, what is an example of a "bad" step that it's supposed to discourage?

https://github.com/bitwarden/gh-actions/blob/5b6221ea0434becf48eb6c98b16515dbd326c04e/lint-workflow/lint.py#L381C1-L389C30

Suggestions (either works):

• Relax the linter rule to a warning
• Remove the linter rule entirely
• Make the linter rule support multiline strings correctly

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• [deps]: Update crowdin/cli Docker tag to v3.19.2
• [deps]: Update gh minor (actions/setup-python, tj-actions/changed-files)
• [deps]: Update npm minor (@actions/artifact, @types/node, adm-zip, lint-staged, prettier, typescript)
• [deps]: Update filesize to v10
• [deps]: Update tj-actions/changed-files action to v44
• [deps]: Lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

dockerfile

crowdin/Dockerfile

• crowdin/cli 3.16.0

get-checksum/Dockerfile

• python 3-slim

version-bump/Dockerfile

• python 3-slim

github-actions

.github/workflows/check-run.yml

• actions-cool/check-user-permission v2.2.1@956b2e73cdfe3bcb819bb7225e490cb3b18fd76e
• ubuntu 22.04

.github/workflows/enforce-labels.yml

• ubuntu 22.04

.github/workflows/lint-ci.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/setup-python v5.0.0@0a5c61591373683505ea898e09a3ea4f39ef2b9c
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/setup-python v5.0.0@0a5c61591373683505ea898e09a3ea4f39ef2b9c
• ubuntu 22.04
• ubuntu 22.04

.github/workflows/test-download-artifacts.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• ubuntu 22.04
• ubuntu 22.04
• ubuntu 22.04
• ubuntu 22.04
• ubuntu 22.04
• ubuntu 22.04
• ubuntu 22.04
• ubuntu 22.04

.github/workflows/test-lint-workflow.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11

.github/workflows/test-release-version-check.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11

.github/workflows/test-report-deployment-status-to-slack.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• ubuntu 22.04
• ubuntu 22.04

.github/workflows/test-version-bump.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11

.github/workflows/upload-test-artifacts.yml

• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• ubuntu 22.04
• ubuntu 22.04
• ubuntu 22.04

.github/workflows/workflow-linter.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• tj-actions/changed-files v43.0.0@77af4bed286740ef1a6387dc4e4e4dec39f96054
• ubuntu 22.04

report-deployment-status-to-slack/action.yml

• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• slackapi/slack-github-action v1.25.0@6c661ce58804a1a20f6dc5fbee7f0381b469e001

setup-docker-trust/action.yml

• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf

npm

download-artifacts/package.json

• @actions/artifact 2.0.0
• @actions/core 1.10.1
• @actions/github 6.0.0
• adm-zip 0.5.10
• filesize 9.0.11

get-keyvault-secrets/package.json

• @actions/core 1.10.1
• @actions/exec 1.1.1
• azure-actions-webclient 1.1.1
• @types/node 20.9.2
• typescript 5.2.2

package.json

• husky 9.0.11
• lint-staged 15.1.0
• prettier 3.1.0

pipenv

lint-workflow-v2/Pipfile

lint-workflow/Pipfile

---

• Check this box to trigger a request for Renovate to run again on this repository

Python Linter returns incorrect URLs when an action has an update.

When using the Python linter and it returns a list of URLs for action updates. Some URLs point to 404 pages.

Example:

The first URL is ok
Azure/login@1f63701

The third links to a 404 page.
Azure/functions-action@bfcee49