nc0fr/fr

My portfolio, blog, and more...

Nicolas Paul

• www.nc0.fr
• [email protected] (32C1 D8E6 97AB A8F1 7BE4 E0D7 C147 8EC7 1E6E 6923)
• @_nc0fr

fr's Issues

Update Python version in GitHub runners

The GoIndex CI is currently failing due to an error with the installed Python version.
Indeed, the generation script for //fr/go_index requires enum.StrEnum, which is available in Python 3.11 and later, whereas the runners are currently running older Python versions.

To fix this, we simply need to install and update local Python3 to 3.11.

New website with blog section

Something simple and fast

Change to Open Source license

As the repository is public and most of the content in it shall not require special treatment, it is a great idea to make the content of this repository open-source, meaning distributing it under an OSI-approved license contract, such as BSD-style licenses.

Pin GitHub Actions using ratchet

Pinning dependencies is a commonly forget security measure to avoid supply chain attacks. External GitHub Actions are dependencies too!

Ratchet is a cool utility tool to automate the act of pinning, verifying, and updating external GitHub Actions to specific commits.

Pinning can be done using:

ratchet pin .github/workflows/*

An additional step would be to add a CI pipeline that verifies all workflows are pinned and up-to-dates.