1
0
Fork 0
mirror of https://github.com/kyverno/policy-reporter.git synced 2024-12-15 17:50:58 +00:00
Commit graph

60 commits

Author SHA1 Message Date
dependabot[bot]
07a67c1bd3
Bump docker/build-push-action from 6.9.0 to 6.10.0 (#603)
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.9.0 to 6.10.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](4f58ea7922...48aba3b46d)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-27 00:44:17 +01:00
dependabot[bot]
fc6b7d5139
Bump zgosalvez/github-actions-ensure-sha-pinned-actions (#601)
Bumps [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions) from 3.0.16 to 3.0.17.
- [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases)
- [Commits](38608ef4fb...5d6ac37a4c)

---
updated-dependencies:
- dependency-name: zgosalvez/github-actions-ensure-sha-pinned-actions
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-26 08:30:36 +01:00
dependabot[bot]
37267a5548
Bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 (#587)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.28.0 to 0.29.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](915b19bbe7...18f2510ee3)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-21 11:30:10 +01:00
Frank Jogeleit
ac003ca78d
feat(http): Support Proxy ENV values for HTTP Clients (#569)
* feat(http): Support Proxy ENV values for HTTP Clients

Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>

* chore(actions): Update Trivy DB repository

Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>

---------

Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2024-11-13 08:57:56 +00:00
dependabot[bot]
c0707e0106
Bump zgosalvez/github-actions-ensure-sha-pinned-actions (#550)
Bumps [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions) from 3.0.15 to 3.0.16.
- [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases)
- [Commits](ed00f72a3c...38608ef4fb)

---
updated-dependencies:
- dependency-name: zgosalvez/github-actions-ensure-sha-pinned-actions
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-04 22:27:59 +01:00
dependabot[bot]
2f9c0090f6
Bump coverallsapp/github-action from 2.3.3 to 2.3.4 (#539)
Bumps [coverallsapp/github-action](https://github.com/coverallsapp/github-action) from 2.3.3 to 2.3.4.
- [Release notes](https://github.com/coverallsapp/github-action/releases)
- [Commits](4cdef0b2db...cfd0633edb)

---
updated-dependencies:
- dependency-name: coverallsapp/github-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-26 08:47:29 +02:00
dependabot[bot]
20e789c0fe
Bump actions/setup-go from 5.0.2 to 5.1.0 (#537)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.0.2 to 5.1.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](0a12ed9d6a...41dfa10bad)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-24 21:50:07 +02:00
dependabot[bot]
43337d37df
Bump actions/setup-node from 4.0.4 to 4.1.0 (#538)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4.0.4 to 4.1.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](0a44ba7841...39370e3970)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-24 21:49:45 +02:00
dependabot[bot]
ec98bae128
Bump actions/checkout from 4.2.1 to 4.2.2 (#529)
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.1 to 4.2.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](eef61447b9...11bd71901b)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-24 08:57:18 +02:00
dependabot[bot]
aedc2afd2f
Bump zgosalvez/github-actions-ensure-sha-pinned-actions (#526)
Bumps [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions) from 3.0.14 to 3.0.15.
- [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases)
- [Commits](40ba2d51b6...ed00f72a3c)

---
updated-dependencies:
- dependency-name: zgosalvez/github-actions-ensure-sha-pinned-actions
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-21 22:19:20 +02:00
dependabot[bot]
a80fbbf87e
Bump coverallsapp/github-action from 2.3.2 to 2.3.3 (#522)
Bumps [coverallsapp/github-action](https://github.com/coverallsapp/github-action) from 2.3.2 to 2.3.3.
- [Release notes](https://github.com/coverallsapp/github-action/releases)
- [Commits](43f11c4e05...4cdef0b2db)

---
updated-dependencies:
- dependency-name: coverallsapp/github-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-17 23:53:39 +02:00
dependabot[bot]
92115717de
Bump aquasecurity/trivy-action from 0.27.0 to 0.28.0 (#517)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.27.0 to 0.28.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](5681af892c...915b19bbe7)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-15 22:43:04 +02:00
dependabot[bot]
e52002e780
Bump jandelgado/gcov2lcov-action from 1.1.0 to 1.1.1 (#518)
Bumps [jandelgado/gcov2lcov-action](https://github.com/jandelgado/gcov2lcov-action) from 1.1.0 to 1.1.1.
- [Release notes](https://github.com/jandelgado/gcov2lcov-action/releases)
- [Changelog](https://github.com/jandelgado/gcov2lcov-action/blob/master/CHANGELOG.md)
- [Commits](69ef3d59a2...4e19897678)

---
updated-dependencies:
- dependency-name: jandelgado/gcov2lcov-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-15 22:34:20 +02:00
dependabot[bot]
3a9ef5b553
Bump coverallsapp/github-action from 2.3.1 to 2.3.2 (#519)
Bumps [coverallsapp/github-action](https://github.com/coverallsapp/github-action) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/coverallsapp/github-action/releases)
- [Commits](1134c89e4b...43f11c4e05)

---
updated-dependencies:
- dependency-name: coverallsapp/github-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-15 22:34:07 +02:00
dependabot[bot]
6000bdbbb9
Bump jandelgado/gcov2lcov-action from 1.0.9 to 1.1.0 (#512)
Bumps [jandelgado/gcov2lcov-action](https://github.com/jandelgado/gcov2lcov-action) from 1.0.9 to 1.1.0.
- [Release notes](https://github.com/jandelgado/gcov2lcov-action/releases)
- [Changelog](https://github.com/jandelgado/gcov2lcov-action/blob/master/CHANGELOG.md)
- [Commits](c680c0f7c7...69ef3d59a2)

---
updated-dependencies:
- dependency-name: jandelgado/gcov2lcov-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-14 22:07:00 +02:00
Víctor Cuadrado Juan
8f5e4afe43
ci: Generate and sign provenance information as image layer for SLSA lvl 3 (#504)
* ci: Generate and sign provenance info as image layer

Configure docker buildx to generate provenance attestations
as explained in
https://docs.docker.com/build/metadata/attestations/slsa-provenance.

Find the specific layer digest that corresponds to that provenance
attestation, both for linux/amd64 and linux/arm64 architectures, and
sign it.

Signed-off-by: Víctor Cuadrado Juan <vcuadradojuan@suse.de>

* ci: Use github.repository_owner instead of hardcoded org

This allows to test the CI workflows in a fork, and to not need
push permissions to production OCI registry namespace under
ghcr.io/kyverno.

Signed-off-by: Víctor Cuadrado Juan <vcuadradojuan@suse.de>

---------

Signed-off-by: Víctor Cuadrado Juan <vcuadradojuan@suse.de>
2024-10-12 10:14:37 +02:00
dependabot[bot]
b36adb3cc0
Bump aquasecurity/trivy-action from 0.26.0 to 0.27.0 (#507)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.26.0 to 0.27.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](a20de5420d...5681af892c)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-11 21:37:23 +02:00
dependabot[bot]
14c240949a
Bump coverallsapp/github-action from 2.3.0 to 2.3.1 (#506)
Bumps [coverallsapp/github-action](https://github.com/coverallsapp/github-action) from 2.3.0 to 2.3.1.
- [Release notes](https://github.com/coverallsapp/github-action/releases)
- [Commits](643bc377ff...1134c89e4b)

---
updated-dependencies:
- dependency-name: coverallsapp/github-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-11 21:37:01 +02:00
dependabot[bot]
1db5082819
Bump actions/upload-artifact from 4.4.2 to 4.4.3 (#502)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.4.2 to 4.4.3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](84480863f2...b4b15b8c7c)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-09 22:06:21 +02:00
dependabot[bot]
5de86a348f
Bump aquasecurity/trivy-action from 0.25.0 to 0.26.0 (#503)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.25.0 to 0.26.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](f781cce5aa...a20de5420d)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-09 22:05:53 +02:00
dependabot[bot]
94c99152d5
Bump aquasecurity/trivy-action from 0.24.0 to 0.25.0 (#499)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.24.0 to 0.25.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](6e7b7d1fd3...f781cce5aa)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-08 22:18:50 +02:00
dependabot[bot]
4a99926b3e
Bump actions/upload-artifact from 4.4.1 to 4.4.2 (#500)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.4.1 to 4.4.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](604373da63...84480863f2)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-08 22:18:41 +02:00
dependabot[bot]
90ca780c36
Bump actions/checkout from 4.2.0 to 4.2.1 (#492)
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.0 to 4.2.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](d632683dd7...eef61447b9)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-07 21:35:31 +02:00
dependabot[bot]
9d975bc00e
Bump actions/upload-artifact from 4.4.0 to 4.4.1 (#493)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.4.0 to 4.4.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](50769540e7...604373da63)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-07 21:35:18 +02:00
Frank Jogeleit
cea23925b0 Cleanup Chart workflow
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2024-10-07 14:21:15 +02:00
Frank Jogeleit
7b549c672d Update Chart workflow
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2024-10-07 14:15:31 +02:00
Frank Jogeleit
27b04d0e0e Update Chart workflow
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2024-10-07 14:10:43 +02:00
Frank Jogeleit
44316bdc11 Merge branch 'main' of https://github.com/kyverno/policy-reporter 2024-10-07 11:19:44 +02:00
Frank Jogeleit
6ae3d3c115 cancel concurrent checks
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2024-10-07 11:19:29 +02:00
dependabot[bot]
cf16772d6b
Bump sigstore/cosign-installer from 3.2.0 to 3.7.0 (#484)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.2.0 to 3.7.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](1fc5bd396d...dc72c7d5c4)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-07 11:18:29 +02:00
dependabot[bot]
5b1f2018f3
Bump zgosalvez/github-actions-ensure-sha-pinned-actions (#483)
Bumps [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions) from 3.0.13 to 3.0.14.
- [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases)
- [Commits](b8f9a25a51...40ba2d51b6)

---
updated-dependencies:
- dependency-name: zgosalvez/github-actions-ensure-sha-pinned-actions
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-07 11:18:21 +02:00
Frank Jogeleit
a002d1bc71 update workflows
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2024-10-07 11:16:50 +02:00
Frank Jogeleit
78f24497fa
Policy Reporter v3 (#482)
Policy Reporter v3

Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2024-10-07 11:10:46 +02:00
Frank Jogeleit
a2afef74a0 install required go version in workflow
Signed-off-by: Frank Jogeleit <frank.jogeleit@lovoo.com>
2024-04-18 13:28:42 +02:00
Frank Jogeleit
14d1660ed9 update workflow
Signed-off-by: Frank Jogeleit <frank.jogeleit@lovoo.com>
2024-04-18 12:04:32 +02:00
Frank Jogeleit
ea8ae54520
support custom headers for loki target (#422)
* support custom headers for loki target

Signed-off-by: Frank Jogeleit <frank.jogeleit@lovoo.com>
2024-04-18 10:02:37 +02:00
Frank Jogeleit
41df2568a4 prepare release
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2023-11-17 09:45:37 +01:00
Frank Jogeleit
1c68da3797 update cosign
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2023-11-09 11:07:03 +01:00
Frank Jogeleit
ac83fac5f5
basic auth for API and Metrics (#343)
* basic auth for API and Metrics

Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2023-09-10 10:00:31 +02:00
Frank Jogeleit
607c929cbf update docker/setup-qemu-action action
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2023-04-06 12:39:04 +02:00
Frank Jogeleit
e6b35d90f7 Update CI actions
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2023-04-06 11:44:21 +02:00
Frank Jogeleit
d3bd97f1d3 update ui
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2023-03-31 18:14:35 +02:00
Frank Jogeleit
6687d71159
Image signing (#287)
* sign image

Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2023-03-31 15:09:16 +02:00
Frank Jogeleit
7d77748833 Tweak SQLite config, enable shared cache and busy_timeout
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2023-03-03 11:07:25 +01:00
Frank Jogeleit
fbea49797c
Dependency Updates (#200)
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2022-09-12 00:21:23 +02:00
Frank Jogeleit
b22769de6f
Target secretRef (#199)
* Refactor Targets: Use Option structs
* Read sensitive information from secrets
* Update Helm Chart
* Update Go Version in CI workflow

Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2022-09-12 00:12:00 +02:00
Frank Jogeleit
011dfa830f
Update Policy Reporter UI (#170)
* Update Policy Reporter UI

Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2022-07-20 11:58:19 +02:00
Frank Jogeleit
fb4b88411c Add manifest install instructions for email reports
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2022-07-04 12:28:44 +02:00
Frank Jogeleit
6040b8e087 Optional Offsetn
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2022-06-04 10:18:02 +02:00
Frank Jogeleit
0edce27de9 Remove duplicated tes flow
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2021-12-13 17:19:25 +01:00