dependabot[bot]
c3fb817985
Bump aquasecurity/trivy-action from 0.5.1 to 0.7.1 ( #8953 )
...
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action ) from 0.5.1 to 0.7.1.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases )
- [Commits](0105373003...d63413b0a4
)
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-22 15:26:09 -07:00
dependabot[bot]
21fab45e9d
Bump securego/gosec ( #8952 )
...
Bumps [securego/gosec](https://github.com/securego/gosec ) from b99b5f7838e43a4104354ad92a6a1774302ee1f9 to 2.13.1. This release includes the previously tagged commit.
- [Release notes](https://github.com/securego/gosec/releases )
- [Changelog](https://github.com/securego/gosec/blob/master/.goreleaser.yml )
- [Commits](b99b5f7838...19fa856bad
)
---
updated-dependencies:
- dependency-name: securego/gosec
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-22 15:24:09 -07:00
dependabot[bot]
2e3eb675a8
Bump geekyeggo/delete-artifact ( #8951 )
...
Bumps [geekyeggo/delete-artifact](https://github.com/geekyeggo/delete-artifact ) from a6ab43859c960a8b74cbc6291f362c7fb51829ba to 1. This release includes the previously tagged commit.
- [Release notes](https://github.com/geekyeggo/delete-artifact/releases )
- [Commits](a6ab43859c...b73cb98674
)
---
updated-dependencies:
- dependency-name: geekyeggo/delete-artifact
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-22 15:22:09 -07:00
dependabot[bot]
cecd085ef7
Bump github/codeql-action from 2.1.18 to 2.1.19 ( #8950 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.1.18 to 2.1.19.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v2.1.18...f5d217be74900c6ac8fbbe53f3c10376ba4e64da )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-22 15:20:10 -07:00
Ismayil Mirzali
1dc9d98833
Reimplement kubectl plugin release workflow ( #8812 )
...
* Feat: reimplement kubectl plugin release system
This commit does the following changes:
- Add GitHub Actions pipeline for releasing the plugin
- Removes the build/build-plugin.sh and replaces this with GoReleaser
- Adds the use of krew-release-bot for automatically updating the krew
release
- Removes the make target for build/build-plugin.sh
Signed-off-by: Ismayil Mirzali <ismayilmirzeli@gmail.com>
* Fix: pin github actions stages with commit sha
Signed-off-by: Ismayil Mirzali <ismayilmirzeli@gmail.com>
Signed-off-by: Ismayil Mirzali <ismayilmirzeli@gmail.com>
2022-08-11 21:22:43 -07:00
James Strong
ead3c2bc95
remove on pushes
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-08-08 17:14:13 -07:00
James Strong
0c343c8a77
stesting pathing
2022-08-08 17:08:21 -07:00
James Strong
1d2fa93856
sarif upload issues
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-08-08 17:04:59 -07:00
James Strong
e55a84e8a0
testing output of sarif file
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-08-08 16:40:30 -07:00
James Strong
9162fe0aa8
fix permissions
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-08-08 16:39:32 -07:00
James Strong
ebb8308654
it seems sarif upload needs git information
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-08-08 16:17:24 -07:00
James Strong
932320cf44
need short tags
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-08-08 16:01:27 -07:00
James Strong
069ac3a0d6
remove var
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-08-08 15:40:06 -07:00
James Strong
13639b5ad7
add scanning to CI
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-08-08 15:36:49 -07:00
dependabot[bot]
4077f7e682
Bump github/codeql-action from 2.1.17 to 2.1.18 ( #8914 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.1.17 to 2.1.18.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](0c670bbf04...2ca79b6fa8
)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-08 06:58:20 -07:00
dependabot[bot]
72a01bbe6e
Bump github/codeql-action from 2.1.16 to 2.1.17 ( #8894 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.1.16 to 2.1.17.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](3e7e3b32d0...0c670bbf04
)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-01 05:52:29 -07:00
dependabot[bot]
476be7757f
Bump github/codeql-action from 2.1.15 to 2.1.16 ( #8837 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.1.15 to 2.1.16.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](3f62b754e2...3e7e3b32d0
)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-18 07:05:15 -07:00
dependabot[bot]
c3d43315b0
Bump actions/dependency-review-action from 2.0.2 to 2.0.4 ( #8836 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 2.0.2 to 2.0.4.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](1c59cdf2a9...94145f3150
)
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-18 05:39:16 -07:00
dependabot[bot]
cdd69d03ab
Bump actions/setup-go from 3.2.0 to 3.2.1 ( #8835 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 3.2.0 to 3.2.1.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](b22fbbc292...84cbf80943
)
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-18 05:37:15 -07:00
Ricardo Katz
8f6c2e6b2e
Add v1.24.0 to test matrix ( #8798 )
2022-07-10 18:35:47 -07:00
James Strong
e1a16f6e74
Update nginx base image in one place ( #8400 )
...
* update files to use one base image file
Signed-off-by: James Strong <strong.james.e@gmail.com>
* add chart test as well
Signed-off-by: James Strong <strong.james.e@gmail.com>
* update e2e-test image building
Signed-off-by: James Strong <strong.james.e@gmail.com>
* update e2e base image arg
Signed-off-by: James Strong <strong.james.e@gmail.com>
* add current e2e so test run
Signed-off-by: James Strong <strong.james.e@gmail.com>
* working on fixing build
* getting dev-env and make release to work
* test
* i think buildx is working on mac
* updates
* why docker for mac and linux cli differ
* fix target arch
* fix target arch
* fix loag issue
* fix issue
* update the chroot docker file
* fix docker base build
* mac is the issue
* env not getting to the e2e deployment.go file
* fix pull issue
* fix pull issue
* move test scripts into test folder
* clean up ci
* updates for PR
* remove unnesscary var
2022-07-08 09:27:47 -07:00
Long Wu Yuan
596712b34f
added announcement ( #8750 )
2022-07-06 00:02:49 -07:00
dependabot[bot]
0f3c1f7be2
Bump ossf/scorecard-action from 1.1.1 to 1.1.2 ( #8772 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 1.1.1 to 1.1.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](3e15ea8318...ce330fde6b
)
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-02 14:41:24 -07:00
dependabot[bot]
fda73c983e
Bump github/codeql-action from 2.1.14 to 2.1.15 ( #8773 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.1.14 to 2.1.15.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](41a4ada31b...3f62b754e2
)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-02 14:35:26 -07:00
Jintao Zhang
ed93b70712
Bump github/codeql-action from 1.0.26 to 2.1.14 ( #8765 )
...
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-07-02 11:37:24 -07:00
James Strong
0f30cb04e4
Ci pin deps ( #8720 )
...
* pinning deps for CI
* update all the actions and pin them
* missed one
* update helm to another action
* typo on step
* typo on step
* Update .github/workflows/ci.yaml
Co-authored-by: Jintao Zhang <tao12345666333@163.com>
Co-authored-by: Jintao Zhang <tao12345666333@163.com>
2022-06-23 16:55:20 -07:00
Long Wu Yuan
bb1f9deafd
developing k6 perftest ( #8581 )
2022-06-23 08:41:42 -07:00
James Strong
6bc4ed15eb
Create Openssf scorecard
2022-06-20 16:03:02 -05:00
dependabot[bot]
1a24bc26a1
Bump actions/dependency-review-action from 1 to 2 ( #8703 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 1 to 2.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](https://github.com/actions/dependency-review-action/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-15 15:17:10 -07:00
dependabot[bot]
2e1b890758
Bump actions/setup-go from 2.2.0 to 3.2.0 ( #8697 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 2.2.0 to 3.2.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](bfdd3570ce...b22fbbc292
)
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-15 13:55:11 -07:00
dependabot[bot]
bb83708b83
Bump actions/upload-artifact from 2.3.1 to 3.1.0 ( #8698 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 2.3.1 to 3.1.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](82c141cc51...3cea537223
)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-15 13:51:11 -07:00
dependabot[bot]
3db47847ea
Bump actions/download-artifact from 2 to 3 ( #8695 )
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 2 to 3.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v2...fb598a63ae348fa914e94cd0ff38f362e927b741 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-15 12:09:18 -07:00
dependabot[bot]
667a49afd3
Bump crazy-max/ghaction-docker-buildx from 1.6.2 to 3.3.1 ( #8694 )
...
Bumps [crazy-max/ghaction-docker-buildx](https://github.com/crazy-max/ghaction-docker-buildx ) from 1.6.2 to 3.3.1.
- [Release notes](https://github.com/crazy-max/ghaction-docker-buildx/releases )
- [Changelog](https://github.com/crazy-max/ghaction-docker-buildx/blob/master/CHANGELOG.md )
- [Commits](e01797ad2e...126d331dc6
)
---
updated-dependencies:
- dependency-name: crazy-max/ghaction-docker-buildx
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-15 12:07:18 -07:00
Naveen
902c9dbee8
Updated dependabot to include github actions ( #8335 )
...
- Updated dependabot to include github actions.
2022-06-15 08:37:17 -07:00
Long Wu Yuan
0005c080da
moved whathappend to top ( #8684 )
2022-06-10 03:51:47 -07:00
Long Wu Yuan
2fc8a62d1a
removed unavailable flag ( #8681 )
2022-06-09 10:03:42 -07:00
Long Wu Yuan
fb2f00bae5
bumped kind version to 0.14.0 ( #8677 )
2022-06-07 09:02:56 -07:00
Abhishek Agarwal
4a6d15a5a2
update ci kind version to v0.14.0 ( #8656 )
...
* update ci kind version to v0.14.0
Signed-off-by: Abhishek Agarwal <abhishek.agarwal@mayadata.io>
* updated the ci strategy matrix k8s versions
Signed-off-by: Abhishek Agarwal <abhishek.agarwal@mayadata.io>
2022-06-01 03:57:02 -07:00
Long Wu Yuan
24b8e32b08
bumped go version to 1.18.1 ( #8578 )
2022-05-11 11:45:03 -07:00
Long Wu Yuan
072da9a665
bump helm helm-docs kustomize to fix failing ci ( #8492 )
2022-04-20 15:10:57 -07:00
Ricardo Katz
3def835a6a
Jail/chroot nginx process inside controller container ( #8337 )
...
* Initial work on chrooting nginx process
* More improvements in chroot
* Fix charts and some file locations
* Fix symlink on non chrooted container
* fix psp test
* Add e2e tests to chroot image
* Fix logger
* Add internal logger in controller
* Fix overlay for chrooted tests
* Fix tests
* fix boilerplates
* Fix unittest to point to the right pid
* Fix PR review
2022-04-08 21:48:04 -07:00
Ricardo Katz
43a5b7a52d
Add dependency review enforcement ( #8443 )
2022-04-07 09:31:58 -07:00
James Strong
ad47d49216
force helm release to artifact hub ( #8417 )
...
* force helm release to artifact hub
Signed-off-by: James Strong <strong.james.e@gmail.com>
* update releaser version
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-04-01 17:14:13 -03:00
Nishant Jain
5c07c862e1
Removed s390x, linux/arm platform as docker build was crashing ( #8121 )
...
Co-authored-by: Carlos Tadeu Panato Junior <ctadeu@gmail.com>
2022-03-22 04:23:44 -07:00
Naveen
974d038c2a
Pinned GitHub workflows by SHA ( #8334 )
...
- Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
- Included permissions for some of the actions. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
Dependabot can upgrade pinned version of actions.
2022-03-14 08:29:58 -07:00
Jintao Zhang
40c69a1ef7
chore: add Artifact Hub lint ( #8204 )
...
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-01-28 06:16:31 -08:00
Long Wu Yuan
922e27fea7
reintroduce helm-docs step in ci ( #8164 )
2022-01-20 15:32:30 -08:00
Ricardo Katz
cce04fca48
Rollback on helmdoc generation ( #8154 )
2022-01-17 05:09:30 -08:00
Ricardo Katz
c667cf083b
Last attempt to fix helm docs ( #8153 )
2022-01-16 22:59:36 -03:00
Ricardo Katz
2db580a513
fix helmdoc push shell script ( #8152 )
2022-01-16 22:49:11 -03:00