Commit graph

122 commits

Author SHA1 Message Date
dependabot[bot]
c3fb817985
Bump aquasecurity/trivy-action from 0.5.1 to 0.7.1 (#8953)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.5.1 to 0.7.1.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](0105373003...d63413b0a4)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-22 15:26:09 -07:00
dependabot[bot]
21fab45e9d
Bump securego/gosec (#8952)
Bumps [securego/gosec](https://github.com/securego/gosec) from b99b5f7838e43a4104354ad92a6a1774302ee1f9 to 2.13.1. This release includes the previously tagged commit.
- [Release notes](https://github.com/securego/gosec/releases)
- [Changelog](https://github.com/securego/gosec/blob/master/.goreleaser.yml)
- [Commits](b99b5f7838...19fa856bad)

---
updated-dependencies:
- dependency-name: securego/gosec
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-22 15:24:09 -07:00
dependabot[bot]
2e3eb675a8
Bump geekyeggo/delete-artifact (#8951)
Bumps [geekyeggo/delete-artifact](https://github.com/geekyeggo/delete-artifact) from a6ab43859c960a8b74cbc6291f362c7fb51829ba to 1. This release includes the previously tagged commit.
- [Release notes](https://github.com/geekyeggo/delete-artifact/releases)
- [Commits](a6ab43859c...b73cb98674)

---
updated-dependencies:
- dependency-name: geekyeggo/delete-artifact
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-22 15:22:09 -07:00
dependabot[bot]
cecd085ef7
Bump github/codeql-action from 2.1.18 to 2.1.19 (#8950)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.18 to 2.1.19.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2.1.18...f5d217be74900c6ac8fbbe53f3c10376ba4e64da)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-22 15:20:10 -07:00
Ismayil Mirzali
1dc9d98833
Reimplement kubectl plugin release workflow (#8812)
* Feat: reimplement kubectl plugin release system

This commit does the following changes:
- Add GitHub Actions pipeline for releasing the plugin
- Removes the build/build-plugin.sh and replaces this with GoReleaser
- Adds the use of krew-release-bot for automatically updating the krew
  release
- Removes the make target for build/build-plugin.sh

Signed-off-by: Ismayil Mirzali <ismayilmirzeli@gmail.com>

* Fix: pin github actions stages with commit sha

Signed-off-by: Ismayil Mirzali <ismayilmirzeli@gmail.com>

Signed-off-by: Ismayil Mirzali <ismayilmirzeli@gmail.com>
2022-08-11 21:22:43 -07:00
James Strong
ead3c2bc95
remove on pushes
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-08-08 17:14:13 -07:00
James Strong
0c343c8a77
stesting pathing 2022-08-08 17:08:21 -07:00
James Strong
1d2fa93856
sarif upload issues
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-08-08 17:04:59 -07:00
James Strong
e55a84e8a0
testing output of sarif file
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-08-08 16:40:30 -07:00
James Strong
9162fe0aa8
fix permissions
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-08-08 16:39:32 -07:00
James Strong
ebb8308654
it seems sarif upload needs git information
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-08-08 16:17:24 -07:00
James Strong
932320cf44
need short tags
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-08-08 16:01:27 -07:00
James Strong
069ac3a0d6
remove var
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-08-08 15:40:06 -07:00
James Strong
13639b5ad7
add scanning to CI
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-08-08 15:36:49 -07:00
dependabot[bot]
4077f7e682
Bump github/codeql-action from 2.1.17 to 2.1.18 (#8914)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.17 to 2.1.18.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](0c670bbf04...2ca79b6fa8)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-08 06:58:20 -07:00
dependabot[bot]
72a01bbe6e
Bump github/codeql-action from 2.1.16 to 2.1.17 (#8894)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.16 to 2.1.17.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](3e7e3b32d0...0c670bbf04)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-01 05:52:29 -07:00
dependabot[bot]
476be7757f
Bump github/codeql-action from 2.1.15 to 2.1.16 (#8837)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.15 to 2.1.16.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](3f62b754e2...3e7e3b32d0)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-18 07:05:15 -07:00
dependabot[bot]
c3d43315b0
Bump actions/dependency-review-action from 2.0.2 to 2.0.4 (#8836)
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 2.0.2 to 2.0.4.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](1c59cdf2a9...94145f3150)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-18 05:39:16 -07:00
dependabot[bot]
cdd69d03ab
Bump actions/setup-go from 3.2.0 to 3.2.1 (#8835)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.2.0 to 3.2.1.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](b22fbbc292...84cbf80943)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-18 05:37:15 -07:00
Ricardo Katz
8f6c2e6b2e
Add v1.24.0 to test matrix (#8798) 2022-07-10 18:35:47 -07:00
James Strong
e1a16f6e74
Update nginx base image in one place (#8400)
* update files to use one base image file

Signed-off-by: James Strong <strong.james.e@gmail.com>

* add chart test as well

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update e2e-test image building

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update e2e base image arg

Signed-off-by: James Strong <strong.james.e@gmail.com>

* add current e2e so test run

Signed-off-by: James Strong <strong.james.e@gmail.com>

* working on fixing build

* getting dev-env and make release to work

* test

* i think buildx is working on mac

* updates

* why docker for mac and linux cli differ

* fix target arch

* fix target arch

* fix loag issue

* fix issue

* update the chroot docker file

* fix docker base build

* mac is the issue

* env not getting to the e2e deployment.go file

* fix pull issue

* fix pull issue

* move test scripts into test folder

* clean up ci

* updates for PR

* remove unnesscary var
2022-07-08 09:27:47 -07:00
Long Wu Yuan
596712b34f
added announcement (#8750) 2022-07-06 00:02:49 -07:00
dependabot[bot]
0f3c1f7be2
Bump ossf/scorecard-action from 1.1.1 to 1.1.2 (#8772)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.1.1 to 1.1.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](3e15ea8318...ce330fde6b)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-02 14:41:24 -07:00
dependabot[bot]
fda73c983e
Bump github/codeql-action from 2.1.14 to 2.1.15 (#8773)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.14 to 2.1.15.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](41a4ada31b...3f62b754e2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-02 14:35:26 -07:00
Jintao Zhang
ed93b70712
Bump github/codeql-action from 1.0.26 to 2.1.14 (#8765)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-07-02 11:37:24 -07:00
James Strong
0f30cb04e4
Ci pin deps (#8720)
* pinning deps for CI

* update all the actions and pin them

* missed one

* update helm to another action

* typo on step

* typo on step

* Update .github/workflows/ci.yaml

Co-authored-by: Jintao Zhang <tao12345666333@163.com>

Co-authored-by: Jintao Zhang <tao12345666333@163.com>
2022-06-23 16:55:20 -07:00
Long Wu Yuan
bb1f9deafd
developing k6 perftest (#8581) 2022-06-23 08:41:42 -07:00
James Strong
6bc4ed15eb
Create Openssf scorecard 2022-06-20 16:03:02 -05:00
dependabot[bot]
1a24bc26a1
Bump actions/dependency-review-action from 1 to 2 (#8703)
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 1 to 2.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](https://github.com/actions/dependency-review-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-15 15:17:10 -07:00
dependabot[bot]
2e1b890758
Bump actions/setup-go from 2.2.0 to 3.2.0 (#8697)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 2.2.0 to 3.2.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](bfdd3570ce...b22fbbc292)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-15 13:55:11 -07:00
dependabot[bot]
bb83708b83
Bump actions/upload-artifact from 2.3.1 to 3.1.0 (#8698)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 2.3.1 to 3.1.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](82c141cc51...3cea537223)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-15 13:51:11 -07:00
dependabot[bot]
3db47847ea
Bump actions/download-artifact from 2 to 3 (#8695)
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 2 to 3.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v2...fb598a63ae348fa914e94cd0ff38f362e927b741)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-15 12:09:18 -07:00
dependabot[bot]
667a49afd3
Bump crazy-max/ghaction-docker-buildx from 1.6.2 to 3.3.1 (#8694)
Bumps [crazy-max/ghaction-docker-buildx](https://github.com/crazy-max/ghaction-docker-buildx) from 1.6.2 to 3.3.1.
- [Release notes](https://github.com/crazy-max/ghaction-docker-buildx/releases)
- [Changelog](https://github.com/crazy-max/ghaction-docker-buildx/blob/master/CHANGELOG.md)
- [Commits](e01797ad2e...126d331dc6)

---
updated-dependencies:
- dependency-name: crazy-max/ghaction-docker-buildx
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-15 12:07:18 -07:00
Naveen
902c9dbee8
Updated dependabot to include github actions (#8335)
- Updated dependabot to include github actions.
2022-06-15 08:37:17 -07:00
Long Wu Yuan
0005c080da
moved whathappend to top (#8684) 2022-06-10 03:51:47 -07:00
Long Wu Yuan
2fc8a62d1a
removed unavailable flag (#8681) 2022-06-09 10:03:42 -07:00
Long Wu Yuan
fb2f00bae5
bumped kind version to 0.14.0 (#8677) 2022-06-07 09:02:56 -07:00
Abhishek Agarwal
4a6d15a5a2
update ci kind version to v0.14.0 (#8656)
* update ci kind version to v0.14.0

Signed-off-by: Abhishek Agarwal <abhishek.agarwal@mayadata.io>

* updated the ci strategy matrix k8s versions

Signed-off-by: Abhishek Agarwal <abhishek.agarwal@mayadata.io>
2022-06-01 03:57:02 -07:00
Long Wu Yuan
24b8e32b08
bumped go version to 1.18.1 (#8578) 2022-05-11 11:45:03 -07:00
Long Wu Yuan
072da9a665
bump helm helm-docs kustomize to fix failing ci (#8492) 2022-04-20 15:10:57 -07:00
Ricardo Katz
3def835a6a
Jail/chroot nginx process inside controller container (#8337)
* Initial work on chrooting nginx process

* More improvements in chroot

* Fix charts and some file locations

* Fix symlink on non chrooted container

* fix psp test

* Add e2e tests to chroot image

* Fix logger

* Add internal logger in controller

* Fix overlay for chrooted tests

* Fix tests

* fix boilerplates

* Fix unittest to point to the right pid

* Fix PR review
2022-04-08 21:48:04 -07:00
Ricardo Katz
43a5b7a52d
Add dependency review enforcement (#8443) 2022-04-07 09:31:58 -07:00
James Strong
ad47d49216
force helm release to artifact hub (#8417)
* force helm release to artifact hub

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update releaser version

Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-04-01 17:14:13 -03:00
Nishant Jain
5c07c862e1
Removed s390x, linux/arm platform as docker build was crashing (#8121)
Co-authored-by: Carlos Tadeu Panato Junior <ctadeu@gmail.com>
2022-03-22 04:23:44 -07:00
Naveen
974d038c2a
Pinned GitHub workflows by SHA (#8334)
- Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
- Included permissions for some of the actions. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

Dependabot can upgrade pinned version of actions.
2022-03-14 08:29:58 -07:00
Jintao Zhang
40c69a1ef7
chore: add Artifact Hub lint (#8204)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-01-28 06:16:31 -08:00
Long Wu Yuan
922e27fea7
reintroduce helm-docs step in ci (#8164) 2022-01-20 15:32:30 -08:00
Ricardo Katz
cce04fca48
Rollback on helmdoc generation (#8154) 2022-01-17 05:09:30 -08:00
Ricardo Katz
c667cf083b
Last attempt to fix helm docs (#8153) 2022-01-16 22:59:36 -03:00
Ricardo Katz
2db580a513
fix helmdoc push shell script (#8152) 2022-01-16 22:49:11 -03:00