update-cacert-bundle.yml 1.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445
  1. # SPDX-FileCopyrightText: 2022 Nextcloud GmbH and Nextcloud contributors
  2. # SPDX-License-Identifier: MIT
  3. name: Update CA certificate bundle
  4. on:
  5. workflow_dispatch:
  6. schedule:
  7. - cron: "5 2 * * *"
  8. jobs:
  9. update-ca-certificate-bundle:
  10. runs-on: ubuntu-latest
  11. strategy:
  12. fail-fast: false
  13. matrix:
  14. branches: ['master', 'stable29', 'stable28', 'stable27', 'stable26', 'stable25', 'stable24', 'stable23', 'stable22']
  15. name: update-ca-certificate-bundle-${{ matrix.branches }}
  16. steps:
  17. - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
  18. with:
  19. ref: ${{ matrix.branches }}
  20. submodules: true
  21. - name: Download CA certificate bundle from curl
  22. run: curl --etag-compare build/ca-bundle-etag.txt --etag-save build/ca-bundle-etag.txt --output resources/config/ca-bundle.crt https://curl.se/ca/cacert.pem
  23. - name: Create Pull Request
  24. uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c
  25. with:
  26. token: ${{ secrets.COMMAND_BOT_PAT }}
  27. commit-message: 'fix(security): Update CA certificate bundle'
  28. committer: GitHub <noreply@github.com>
  29. author: nextcloud-command <nextcloud-command@users.noreply.github.com>
  30. signoff: true
  31. branch: 'automated/noid/${{ matrix.branches }}-update-ca-cert-bundle'
  32. title: '[${{ matrix.branches }}] fix(security): Update CA certificate bundle'
  33. body: |
  34. Auto-generated update of CA certificate bundle from [https://curl.se/docs/caextract.html](https://curl.se/docs/caextract.html)
  35. labels: |
  36. dependencies
  37. 3. to review
  38. reviewers: ChristophWurst, miaulalala, nickvergessen