Chip Zoller
|
4b5197d3ab
|
add missing step to install Kyverno CLI (#7797)
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: kyverno-bot <104836976+kyverno-bot@users.noreply.github.com>
|
2023-07-10 07:07:38 +00:00 |
|
Charles-Edouard Brétéché
|
230d8235e3
|
chore: bump cosign in gh workflows (#7715)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-07-06 12:19:21 +00:00 |
|
dependabot[bot]
|
9db1ea3e21
|
chore(deps): bump fluxcd/flux2 from 0.41.2 to 2.0.0 (#7764)
Bumps [fluxcd/flux2](https://github.com/fluxcd/flux2) from 0.41.2 to 2.0.0.
- [Release notes](https://github.com/fluxcd/flux2/releases)
- [Changelog](https://github.com/fluxcd/flux2/blob/main/.goreleaser.yml)
- [Commits](dbda8fbdb8...9ea0a535ea)
---
updated-dependencies:
- dependency-name: fluxcd/flux2
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-07-06 09:24:26 +00:00 |
|
Charles-Edouard Brétéché
|
4560df0dc5
|
chore: bump kind node versions (#7737)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-07-03 11:30:17 +00:00 |
|
Charles-Edouard Brétéché
|
5ea387e372
|
fix: use github token instead of pat (#7727)
* fix: remove jmespath replace directive
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: use github token instead of pat
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-30 22:55:58 +00:00 |
|
Charles-Edouard Brétéché
|
164fb8059f
|
fix: reduce token permission (#7729)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-30 15:28:46 +00:00 |
|
Charles-Edouard Brétéché
|
ec549b99cb
|
fix: use gh token instead of pat (#7723)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-30 13:40:08 +00:00 |
|
Charles-Edouard Brétéché
|
6cb54a475c
|
fix: reduce token permissions (#7721)
* fix: reduce token permissions
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: reduce token permissions
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-30 11:44:57 +00:00 |
|
Charles-Edouard Brétéché
|
50c5d55034
|
fix: reduce token permissions (#7719)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-30 10:49:42 +00:00 |
|
Charles-Edouard Brétéché
|
52cb513571
|
chore: use github token instead of pat (#7716)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-30 15:22:10 +08:00 |
|
Charles-Edouard Brétéché
|
bec1f94f70
|
fix: release signing (#7711) (#7713)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-29 16:37:45 +00:00 |
|
Charles-Edouard Brétéché
|
f6933f11f3
|
test: add kuttl tests for background only policies (#7709)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-29 20:53:23 +08:00 |
|
Charles-Edouard Brétéché
|
9d859bc378
|
fix: pr updater workflow (#7697)
* fix: pr updater workflow
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* Update .github/workflows/pr-update.yaml
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
|
2023-06-28 13:26:22 +00:00 |
|
dependabot[bot]
|
5b9c13ad00
|
chore(deps): bump sigstore/cosign-installer from 3.1.0 to 3.1.1 (#7689)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](d13028333d...6e04d228eb)
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-28 07:34:06 +00:00 |
|
Jim Bugwadia
|
b98c0775f2
|
Fix deferred loading (#7597)
* handle nested contexts
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add feature flag
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add kuttl tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix linter issues
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix CLI regclient
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix: token permissions on report vulns workflow (#7611)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: token permissions (#7619)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: update the flag descriptions of the reports-controller (#7617)
Signed-off-by: emmanuel-ferdman <emmanuelferdman@gmail.com>
* fix: panic if env var not defined (#7613)
* fix: panic if env var not defined
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* use toggles instead of a flag
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update toggle name
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update toggle name
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix roles
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix role
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update manifests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* remove extra unlock
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix loader reset
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* propagate context
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* cm resolver
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* level management
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* address review comments
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add enableDeferredLoading to other controllers
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* re-enable ACR credhelper
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* improve tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* remove image registry client init
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* check for invalid reset/restore
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* recursive kuttl test
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* add pre/post queries
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add check for a recursive match
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* new test suite
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* eval loaders at creation level
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* kuttl test
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* add an index for resolving deps in order
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* improve comment
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* extract remove method
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* merge main
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* flags
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* feature flag
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix flag
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* update unit tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* two rules kuttl test
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* update unit tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* revert
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* per rule checkpoint
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix mutate chained rules
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* per rule checpoint/restore
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* log error
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: emmanuel-ferdman <emmanuelferdman@gmail.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Emmanuel Ferdman <emmanuelferdman@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2023-06-27 09:58:50 -07:00 |
|
Charles-Edouard Brétéché
|
2cdeaacb87
|
fix: pr updater workflow (#7665)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-26 11:14:50 +00:00 |
|
dependabot[bot]
|
5f15ad2ddc
|
chore(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 (#7663)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.1.3 to 2.2.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](80e868c13c...08b4669551)
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-26 08:11:22 +00:00 |
|
dependabot[bot]
|
579bee8286
|
chore(deps): bump sigstore/cosign-installer from 3.0.5 to 3.1.0 (#7664)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.5 to 3.1.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](dd6b2e2b61...d13028333d)
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-26 07:39:40 +00:00 |
|
Chip Zoller
|
c6e97c0ecc
|
add missing VULN_TEMPLATE.md (#7640)
* add missing VULN_TEMPLATE.md
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* remove file; fix reference
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
---------
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
|
2023-06-22 13:33:48 +00:00 |
|
Chip Zoller
|
4b8361bcc6
|
fix workflow (#7615)
* fix workflow
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* save
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* jq to compact output
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* fix
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* fix
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
---------
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-21 15:15:55 +00:00 |
|
Charles-Edouard Brétéché
|
48d64bd031
|
fix: token permissions (#7624)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-21 09:47:15 +00:00 |
|
Charles-Edouard Brétéché
|
f307760a08
|
chore: improve pr updater job (#7592)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-21 08:31:11 +00:00 |
|
Charles-Edouard Brétéché
|
ca8888c2da
|
fix: token permissions (#7619)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-20 21:15:47 +00:00 |
|
Charles-Edouard Brétéché
|
d8951d4a95
|
fix: token permissions on report vulns workflow (#7611)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-20 16:01:16 -04:00 |
|
Charles-Edouard Brétéché
|
58023c6360
|
fix: scorecard workflow (#7605)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-20 13:30:15 +00:00 |
|
Charles-Edouard Brétéché
|
74f2cb3076
|
fix: CLI tests (#7596)
* fix: CLI tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-20 12:04:06 +00:00 |
|
Marcel
|
2a2be0ae5a
|
Add nancy-ignore to make it pass with current dependencies (#7590)
Signed-off-by: Marcel Müller <marcel@giantswarm.io>
|
2023-06-19 17:30:23 +00:00 |
|
Charles-Edouard Brétéché
|
2d060fae36
|
fix: scorecard workflow (#7587)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-19 15:47:58 +00:00 |
|
Chip Zoller
|
f6045d7035
|
Test policy library (#7568)
* first attempt at adding policy library to kuttl tests
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* fix checkout
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* use standard config
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* use config file in kyverno/policies
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* cd
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* fix run command
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* fix debug failure uses
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
---------
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-19 15:17:24 +00:00 |
|
Charles-Edouard Brétéché
|
b092d6286b
|
chore: fix token permissions (#7585)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-19 14:25:27 +00:00 |
|
dependabot[bot]
|
575cc7066a
|
chore(deps): bump golangci/golangci-lint-action from 3.5.0 to 3.6.0 (#7511)
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 3.5.0 to 3.6.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](5f1fec7010...639cd343e1)
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-13 08:29:47 +00:00 |
|
dependabot[bot]
|
0af0944f87
|
chore(deps): bump goreleaser/goreleaser-action from 4.2.0 to 4.3.0 (#7510)
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](f82d6c1c34...336e29918d)
---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-13 08:00:25 +00:00 |
|
dependabot[bot]
|
92989dcf94
|
chore(deps): bump github/codeql-action from 2.3.6 to 2.13.4 (#7495)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.3.6 to 2.13.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](83f0fe6c49...cdcdbb5797)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-12 12:36:19 +00:00 |
|
dependabot[bot]
|
43d9f64d94
|
chore(deps): bump aquasecurity/trivy-action from 0.11.0 to 0.11.2 (#7494)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.11.0 to 0.11.2.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](b43daad0c3...41f05d9ecf)
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-12 09:08:28 +00:00 |
|
dependabot[bot]
|
5f73d2b796
|
chore(deps): bump actions/checkout from 3.5.2 to 3.5.3 (#7493)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.2 to 3.5.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](8e5e7e5ab8...c85c95e3d7)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-12 08:11:03 +00:00 |
|
Charles-Edouard Brétéché
|
123ba5f9d8
|
feat: sign released artifacts (#7478)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-09 16:05:45 +00:00 |
|
dependabot[bot]
|
baa05b704f
|
chore(deps): bump slsa-framework/slsa-github-generator (#7462)
Bumps [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator) from 1.6.0 to 1.7.0.
- [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases)
- [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md)
- [Commits](https://github.com/slsa-framework/slsa-github-generator/compare/v1.6.0...v1.7.0)
---
updated-dependencies:
- dependency-name: slsa-framework/slsa-github-generator
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-08 08:23:12 +00:00 |
|
dependabot[bot]
|
4bfe5e3e8d
|
chore(deps): bump docker/login-action from 2.1.0 to 2.2.0 (#7463)
Bumps [docker/login-action](https://github.com/docker/login-action) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](f4ef78c080...465a07811f)
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-08 07:31:25 +00:00 |
|
dependabot[bot]
|
b4014b4c90
|
chore(deps): bump aquasecurity/trivy-action from 0.10.0 to 0.11.0 (#7426)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.10.0 to 0.11.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](e5f43133f6...b43daad0c3)
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-06-06 11:10:36 +00:00 |
|
dependabot[bot]
|
2706c764fe
|
chore(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 (#7414)
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 3.4.0 to 3.5.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](08e2f20817...5f1fec7010)
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-05 07:29:19 +00:00 |
|
dependabot[bot]
|
f540006aa0
|
chore(deps): bump github/codeql-action from 2.3.5 to 2.3.6 (#7382)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.3.5 to 2.3.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](0225834cc5...83f0fe6c49)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-02 07:55:18 +00:00 |
|
dependabot[bot]
|
a6786a152e
|
chore(deps): bump svenstaro/upload-release-action from 2.6.0 to 2.6.1 (#7376)
Bumps [svenstaro/upload-release-action](https://github.com/svenstaro/upload-release-action) from 2.6.0 to 2.6.1.
- [Release notes](https://github.com/svenstaro/upload-release-action/releases)
- [Changelog](https://github.com/svenstaro/upload-release-action/blob/master/CHANGELOG.md)
- [Commits](58d5258088...2b9d2847a9)
---
updated-dependencies:
- dependency-name: svenstaro/upload-release-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-01 08:40:26 +00:00 |
|
dependabot[bot]
|
fd7a25d0e3
|
chore(deps): bump github/codeql-action from 2.3.4 to 2.3.5 (#7302)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.3.4 to 2.3.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](f0e3dfb303...0225834cc5)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-05-26 15:53:56 +08:00 |
|
dependabot[bot]
|
580e01e625
|
chore(deps): bump github/codeql-action from 2.3.3 to 2.3.4 (#7288)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.3.3 to 2.3.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](29b1f65c5e...f0e3dfb303)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-05-25 15:36:22 +00:00 |
|
dependabot[bot]
|
c2045a1496
|
chore(deps): bump actions/setup-python from 4.6.0 to 4.6.1 (#7289)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4.6.0 to 4.6.1.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](57ded4d7d5...bd6b4b6205)
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-05-25 23:02:47 +08:00 |
|
dependabot[bot]
|
8160a44400
|
chore(deps): bump svenstaro/upload-release-action from 2.5.0 to 2.6.0 (#7270)
Bumps [svenstaro/upload-release-action](https://github.com/svenstaro/upload-release-action) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/svenstaro/upload-release-action/releases)
- [Changelog](https://github.com/svenstaro/upload-release-action/blob/master/CHANGELOG.md)
- [Commits](7319e4733e...58d5258088)
---
updated-dependencies:
- dependency-name: svenstaro/upload-release-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-05-24 08:23:24 +00:00 |
|
dependabot[bot]
|
addfe22842
|
chore(deps): bump sigstore/cosign-installer from 3.0.4 to 3.0.5 (#7229)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](03d0fecf17...dd6b2e2b61)
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-05-18 11:04:23 +00:00 |
|
dependabot[bot]
|
e56c795143
|
chore(deps): bump sigstore/cosign-installer from 3.0.3 to 3.0.4 (#7215)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.3 to 3.0.4.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](204a51a57a...03d0fecf17)
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-05-17 07:28:56 +00:00 |
|
dependabot[bot]
|
ea7a01c66e
|
chore(deps): bump codecov/codecov-action from 3.1.3 to 3.1.4 (#7207)
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3.1.3 to 3.1.4.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](894ff025c7...eaaf4bedf3)
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-05-16 20:56:50 +08:00 |
|
dependabot[bot]
|
1d5bf55903
|
chore(deps): bump slsa-framework/slsa-github-generator (#7160)
Bumps [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases)
- [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md)
- [Commits](https://github.com/slsa-framework/slsa-github-generator/compare/v1.5.0...v1.6.0)
---
updated-dependencies:
- dependency-name: slsa-framework/slsa-github-generator
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-05-11 08:54:03 +00:00 |
|