Skip to content

Set up issue forms, CI, CodeQL, Dependabot and security policy - #9

Merged
Kauakb merged 3 commits into
mainfrom
chore/github-setup
Oct 24, 2026
Merged

Kauakb merged 3 commits into
mainfrom
chore/github-setup

Conversation

@Kauakb

@Kauakb Kauakb commented Oct 24, 2026 •

Copy link
Copy Markdown
Owner

What

Issues (Phase 3)

  • Issue forms for bug reports and feature requests (.github/ISSUE_TEMPLATE/)
  • Blank issues disabled; security reports routed to private advisories

GitHub Actions (Phase 4)

  • ci.yml: compiles with javac --release 24 (on JDK 25) and smoke-tests every menu option with scripted input
  • codeql.yml: CodeQL scanning for Java on PRs, pushes to main and every Monday
  • release.yml: on a v* tag, builds BankSystem.jar and publishes a GitHub release

Security (Phase 5)

  • SECURITY.md with private reporting instructions
  • dependabot.yml keeping the GitHub Actions versions up to date
  • README: note that Applicants_Form.txt is fictional data, CI/CodeQL badges, license link
  • Main.java: replace the misleading // Applicants_Form.txt - password comment

Checked locally

  • Compiles with -Xlint:all --release 24 with no warnings
  • Smoke-test input runs through sort, search, binary tree and exit successfully
  • The release jar command produces a runnable jar

Kauakb and others added 3 commits October 24, 2026 02:12
Blank issues are disabled; security reports are pointed to private advisories.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- CI compiles with --release 24 and smoke-tests every menu option
- CodeQL scans Java on PRs, pushes to main and weekly
- Release builds BankSystem.jar and publishes it on v* tags

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- SECURITY.md points reporters to private vulnerability reporting
- Dependabot keeps GitHub Actions versions up to date
- README notes Applicants_Form.txt is fictional data and adds CI badges
- Replace the misleading 'password' comment in Main.java

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@Kauakb Kauakb added ci GitHub Actions and build automation security Security issue or hardening labels Oct 24, 2026
@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@Kauakb
Kauakb merged commit 2ae903d into main Oct 24, 2026
3 checks passed
@Kauakb
Kauakb deleted the chore/github-setup branch October 24, 2026 01:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci GitHub Actions and build automation security Security issue or hardening

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants