eclipse-platform / www.eclipse.org-eclipse-news Goto Github PK

Hi,

As a member of the Security Team from the Eclipse Foundation, we used a tools Scorecard and StepSecurity to analyze this repo in order to push a pull request that cover some or all the following best practices below:

• Apply least privilege principle to GITHUB_TOKEN
• Add or fine tune the use of Dependabot
• Pin actions to a full length commit SHA

As a result, You will see a PR coming from StepSecurity to help to implement those fixes above which will cover a list of points below identified detected:

• Apply least privilege principle to GITHUB_TOKEN for files.github/workflows/updateRelease.yml
• Add or fine tune the use of Dependabot
• Pin Actions to a full length commit SHA for files .github/workflows/updateRelease.yml

Please don’t hesitate and reach out if there is something unclear above.

Kind Regards,
Francisco Perez

source page: https://eclipseide.org/release/noteworthy/

inaccessible pages:
https://eclipse.dev/eclipse/news/4.28/platform.php
https://eclipse.dev/eclipse/news/4.28/jdt.php
https://eclipse.dev/eclipse/news/4.28/platform_isv.php
https://eclipse.dev/eclipse/news/4.28/pde.php

@lak-proddev or @sravanlakkimsetti IIRC you have a script to create the content for the next N&N release? If that is true can you run it and publish the result?

Do we need a repo for N&N? IMHO a wiki would be easier to use and update and also easier accessable for the end user.

My suggestion would be to stop using the HTML document and start using the wiki for N&N.

WDYT @laeubi and @mickaelistria

I think one might want to automate the applyTemplate script on milestone creation, but I don'T see any actions enbaled, can someone enable these or who needs to give +1 for that ?

Every time someone starts a news entry with a P tag, the text is not aligned with the headline left of it:

I've fixed this many times by removing the first paragraph (and instead just leaving the bare content of the previous P tag). However, we should probably rather fix this via CSS instead.