Play button

.github/CODEOWNERS

@@ -0,0 +1,3 @@
+# These owners will be the default owners for everything in
+# the repo. Unless a later match takes precedence,
+*       @petrkucerak @Vilican

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,64 @@
+name: "CodeQL"
+
+on:
+  push:
+    branches: [master, main]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [master, main]
+  schedule:
+    - cron: '0 18 * * 5'
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        # Override automatic language detection by changing the below list
+        # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python']
+        language: ['javascript']
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v2
+      with:
+        # We must fetch at least the immediate parents so that if this is
+        # a pull request then we can checkout the head.
+        fetch-depth: 2
+
+    # If this run was triggered by a pull request event, then checkout
+    # the head of the pull request instead of the merge commit.
+    - run: git checkout HEAD^2
+      if: ${{ github.event_name == 'pull_request' }}
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v1
+      with:
+        languages: ${{ matrix.language }}
+        # If you wish to specify custom queries, you can do so here or in a config file.
+        # By default, queries listed here will override any specified in a config file. 
+        # Prefix the list here with "+" to use these queries and those in the config file.
+        # queries: ./path/to/local/query, your-org/your-repo/queries@main
+
+    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+    # If this step fails, then you should remove it and run the build manually (see below)
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@v1
+
+    # ℹ️ Command-line programs to run using the OS shell.
+    # 📚 https://git.io/JvXDl
+
+    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
+    #    and modify them (or add more) to build your code if your project
+    #    uses a compiled language
+
+    #- run: |
+    #   make bootstrap
+    #   make release
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v1

.github/workflows/ossar.yml

@@ -0,0 +1,49 @@
+# This workflow integrates a collection of open source static analysis tools
+# with GitHub code scanning. For documentation, or to provide feedback, visit
+# https://github.com/github/ossar-action
+name: OSSAR
+
+on:
+  push:
+  pull_request:
+
+jobs:
+  OSSAR-Scan:
+    # OSSAR runs on windows-latest.
+    # ubuntu-latest and macos-latest support coming soon
+    runs-on: windows-latest
+
+    steps:
+      # Checkout your code repository to scan
+    - name: Checkout repository
+      uses: actions/checkout@v2
+      with:
+        # We must fetch at least the immediate parents so that if this is
+        # a pull request then we can checkout the head.
+        fetch-depth: 2
+
+    # If this run was triggered by a pull request event, then checkout
+    # the head of the pull request instead of the merge commit.
+    - run: git checkout HEAD^2
+      if: ${{ github.event_name == 'pull_request' }}
+
+    # Ensure a compatible version of dotnet is installed.
+    # The [Microsoft Security Code Analysis CLI](https://aka.ms/mscadocs) is built with dotnet v3.1.201.
+    # A version greater than or equal to v3.1.201 of dotnet must be installed on the agent in order to run this action.
+    # GitHub hosted runners already have a compatible version of dotnet installed and this step may be skipped.
+    # For self-hosted runners, ensure dotnet version 3.1.201 or later is installed by including this action:
+    # - name: Install .NET
+    #   uses: actions/setup-dotnet@v1
+    #   with:
+    #     dotnet-version: '3.1.x'
+
+      # Run open source static analysis tools
+    - name: Run OSSAR
+      uses: github/ossar-action@v1
+      id: ossar
+
+      # Upload results to the Security tab
+    - name: Upload OSSAR results
+      uses: github/codeql-action/upload-sarif@v1
+      with:
+        sarif_file: ${{ steps.ossar.outputs.sarifFile }}

.gitignore

@@ -0,0 +1,12 @@
+# Ignore Logs
+logs
+*.log
+
+# The files containing environment variables
+.env
+
+# Ignore IDE specific files
+.idea/
+
+# Ignore MacOS DS_Stores
+**/.DS_Store

.gitpod.Dockerfile

@@ -0,0 +1,67 @@
+# Gitpod docker image for WordPress | https://github.com/luizbills/gitpod-wordpress
+# License: MIT (c) 2020 Luiz Paulo "Bills"
+# Version: 0.8
+FROM gitpod/workspace-mysql
+
+### General Settings ###
+ENV PHP_VERSION="7.4"
+ENV APACHE_DOCROOT="public_html"
+
+### Setups, Node, NPM ###
+USER gitpod
+ADD https://api.wordpress.org/secret-key/1.1/salt?rnd=152634 /dev/null
+RUN git clone https://github.com/luizbills/gitpod-wordpress $HOME/gitpod-wordpress && \
+    cat $HOME/gitpod-wordpress/conf/.bashrc.sh >> $HOME/.bashrc && \
+    . $HOME/.bashrc && \
+    bash -c ". .nvm/nvm.sh && nvm install --lts"
+
+### MailHog ###
+USER root
+ARG DEBIAN_FRONTEND=noninteractive
+RUN go get github.com/mailhog/MailHog && \
+    go get github.com/mailhog/mhsendmail && \
+    cp $GOPATH/bin/MailHog /usr/local/bin/mailhog && \
+    cp $GOPATH/bin/mhsendmail /usr/local/bin/mhsendmail && \
+    ln $GOPATH/bin/mhsendmail /usr/sbin/sendmail && \
+    ln $GOPATH/bin/mhsendmail /usr/bin/mail &&\
+    ### Apache ###
+    apt-get -y install apache2 && \
+    chown -R gitpod:gitpod /var/run/apache2 /var/lock/apache2 /var/log/apache2 && \
+    echo "include $HOME/gitpod-wordpress/conf/apache.conf" > /etc/apache2/apache2.conf && \
+    echo ". $HOME/gitpod-wordpress/conf/apache.env.sh" > /etc/apache2/envvars && \
+    ### PHP ###
+    apt-get -qy purge php* && \
+    add-apt-repository ppa:ondrej/php && \
+    apt-get update && \
+    apt-get -qy install \
+        libapache2-mod-php \
+        php${PHP_VERSION} \
+        php${PHP_VERSION}-common \
+        php${PHP_VERSION}-cli \
+        php${PHP_VERSION}-mbstring \
+        php${PHP_VERSION}-curl \
+        php${PHP_VERSION}-gd \
+        php${PHP_VERSION}-intl \
+        php${PHP_VERSION}-mysql \
+        php${PHP_VERSION}-xml \
+        php${PHP_VERSION}-json \
+        php${PHP_VERSION}-zip \
+        php${PHP_VERSION}-soap \
+        php${PHP_VERSION}-bcmath \
+        php${PHP_VERSION}-opcache \
+        php-xdebug && \
+    apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* && \
+    update-alternatives --set php /usr/bin/php${PHP_VERSION} && \
+    cat /home/gitpod/gitpod-wordpress/conf/php.ini >> /etc/php/${PHP_VERSION}/apache2/php.ini && \
+    ### Setup PHP in Apache ###
+    a2dismod php* && \
+    a2dismod mpm_* && \
+    a2enmod mpm_prefork && \
+    a2enmod php${PHP_VERSION} && \
+    ### WP-CLI ###
+    wget -q https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O $HOME/wp-cli.phar && \
+    chmod +x $HOME/wp-cli.phar && \
+    mv $HOME/wp-cli.phar /usr/local/bin/wp && \
+    chown gitpod:gitpod /usr/local/bin/wp
+
+USER gitpod

.gitpod.yml

@@ -0,0 +1,25 @@
+image:
+  file: .gitpod.Dockerfile
+
+ports:
+  - port: 8080
+    onOpen: open-preview
+  - port: 3306
+    onOpen: ignore
+  - port: 8025
+    onOpen: ignore
+  - port: 1025
+    onOpen: ignore
+  - port: 9000
+    onOpen: ignore
+
+tasks:
+  - init: gp await-port 3306 && wp-setup-theme && cd /workspace/stcblog/public_html && wp theme activate stcblog && wp option set blogname studuj.digital && wp option set blogdescription "Články, novinky, tipy a triky z dílny studentů Microsoft STC o moderních technologiích. Studuj s námi digitálně!" && wp post delete 1 && wp plugin install wordpress-importer --activate && wp plugin install syntaxhighlighter --activate && wp import dev/posts.xml --authors=create
+    command: apache2ctl start # start Apache server
+
+  # start MailHog (SMTP testing tool) 
+  - command: mailhog -api-bind-addr 127.0.0.1:8025 -ui-bind-addr 127.0.0.1:8025 -smtp-bind-addr 127.0.0.1:1025
+
+vscode:
+  extensions:
+    - glenn2223.live-sass@4.3.4:oSIVGGL6KX7O0jzLr2O0TA==

README.md

@@ -1,30 +1,30 @@
-[![Build status](https://dev.azure.com/OndrejGolasowski/stcblog/_apis/build/status/stcblog-CI)](https://dev.azure.com/OndrejGolasowski/stcblog/_build/latest?definitionId=2)
+# STCblog Wordpress theme
+[![Build Status](https://dev.azure.com/microsoftstc/stcblog/_apis/build/status/template-deployment?branchName=main)](https://dev.azure.com/microsoftstc/stcblog/_build/latest?definitionId=7&branchName=main)
+![CodeQL](https://github.com/MicrosoftSTC/stcblog/workflows/CodeQL/badge.svg)
 [![License: GPL v3](https://img.shields.io/badge/License-GPLv3-blue.svg)](https://www.gnu.org/licenses/gpl-3.0)
 
-# STCblog Wordpress theme
-Simple original Wordpress theme designed for Microsoft Student Trainee Center project [studuj.digital](https://studuj.digital/).
-The theme was created as a graduation thesis of Andrew Golasowski. It is released as open-source to provide a learning tool for students not only at [SPS Karvina](http://spskarvina.cz/).
+Wordpress theme of the STC blog [studuj.digital](https://studuj.digital/).
 
 ## About project
-Whole theme respects individual requirements of the Microsoft STC and the Microsoft Fluent Design System.
-The project depends on Fabric UI styles. 
+Based on [STCblog template](https://github.com/andreondra/stcblog).
 
 ## Features
 ### Responsive
-![](docs/img/readme1.gif)
+![responsivity showcase](docs/img/readme1.gif)
 
 ### Mobile-ready menu
-![](docs/img/readme2.gif)
+![menu on mobile](docs/img/readme2.gif)
 
 ### Animated search bar
-![](docs/img/readme3.gif)
+![search bar](docs/img/readme3.gif)
 
-### Support for [Easy Table of Contents](https://cs.wordpress.org/plugins/easy-table-of-contents/)
-![](docs/img/readme4.gif)
+### Support for [Easy Table of Contents](https://wordpress.org/plugins/easy-table-of-contents/)
+![TOC](docs/img/readme4.gif)
 
 ## License and copyright
 Project is licensed under GNU GPLv3.
-(C) Ondrej Golasowski, Petr Kucera and contributors.
+(C) Ondrej Golasowski, Petr Kucera and [contributors](https://github.com/MicrosoftSTC/stcblog/graphs/contributors).
 
 ## Fabric UI changes
-Edited _Animation.Mixins.scss - @mixin ms-motion-scaleDownIn doesn't retain state - set to none.
+- [_Animation.Mixins.scss](https://github.com/MicrosoftSTC/stcblog/blob/63221c005b5d84a07a17b2a3bdeffef253cbe3a5/assets/scss/fabric/mixins/_Animation.Mixins.scss#L23-L30) - @mixin ms-motion-scaleDownIn doesn't retain state - set to none.
+- [_Animation.Mixins.MDL2.scss](https://github.com/MicrosoftSTC/stcblog/blob/63221c005b5d84a07a17b2a3bdeffef253cbe3a5/assets/scss/fabric/mixins/_Animation.Mixins.MDL2.scss#L177) - change from an unqoted argument to an unchanged one. (see [#61](https://github.com/MicrosoftSTC/stcblog/pull/61))