Commit Graph

8 Commits

Author SHA1 Message Date
Philipp Stehle 987415a6f8 Use random delimiter when writing to env files
Recommended by GitHub for security.
See https://docs.github.com/en/actions/using-workflows/workflow-commands-for-github-actions#multiline-strings

Also: It is not unthinkable that an output contains the word `EOF` which would cause problems.

Signed-off-by: Philipp Stehle <philipp.stehle@sap.com>
2023-03-29 07:44:10 +02:00
Philipp Stehle 64ba9dec19 Replace deprecated GHA ::set-output syntax
Signed-off-by: Philipp Stehle <philipp.stehle@sap.com>
2023-03-29 07:44:10 +02:00
Mritunjay Sharma 6d9c79ee24 tests: fixes toolkit_test.go with correct GetInputList arg
Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>
2021-06-24 00:15:37 +05:30
Mritunjay Sharma 5e3a904d4b fixes version of mock_toolkit
Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>
2021-06-23 20:29:41 +05:30
Mritunjay Sharma 81169b5a2a tests: adds test in toolkit_test.go for get_input_list
Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>

Update internal/toolkit/toolkit.go

Co-authored-by: Joe Kutner <jpkutner@gmail.com>
Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>
2021-06-22 20:57:57 +05:30
Mritunjay Sharma 4df562b3a4 fixes the blocked_namespaces get input list type
changes in config struct to accept blocklist array of namespaces

Add CII badge to readme

Signed-off-by: Joe Kutner <jpkutner@gmail.com>

Bump github.com/buildpacks/libcnb from 1.20.0 to 1.21.0

Bumps [github.com/buildpacks/libcnb](https://github.com/buildpacks/libcnb) from 1.20.0 to 1.21.0.
- [Release notes](https://github.com/buildpacks/libcnb/releases)
- [Commits](https://github.com/buildpacks/libcnb/compare/v1.20.0...v1.21.0)

Signed-off-by: dependabot[bot] <support@github.com>

Bump github.com/google/go-containerregistry from 0.4.1 to 0.5.0

Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.4.1 to 0.5.0.
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](https://github.com/google/go-containerregistry/compare/v0.4.1...v0.5.0)

Signed-off-by: dependabot[bot] <support@github.com>

Bump github.com/onsi/gomega from 1.11.0 to 1.12.0

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.11.0 to 1.12.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.11.0...v1.12.0)

Signed-off-by: dependabot[bot] <support@github.com>

Bump github.com/pelletier/go-toml from 1.9.0 to 1.9.1

Bumps [github.com/pelletier/go-toml](https://github.com/pelletier/go-toml) from 1.9.0 to 1.9.1.
- [Release notes](https://github.com/pelletier/go-toml/releases)
- [Commits](https://github.com/pelletier/go-toml/compare/v1.9.0...v1.9.1)

Signed-off-by: dependabot[bot] <support@github.com>

Bump actions/checkout from 2 to 2.3.4

Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 2.3.4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v2.3.4)

Signed-off-by: dependabot[bot] <support@github.com>

Bump mheap/github-action-required-labels from 1 to 1.1.2

Bumps [mheap/github-action-required-labels](https://github.com/mheap/github-action-required-labels) from 1 to 1.1.2.
- [Release notes](https://github.com/mheap/github-action-required-labels/releases)
- [Commits](https://github.com/mheap/github-action-required-labels/compare/v1...v1.1.2)

Signed-off-by: dependabot[bot] <support@github.com>

Bump micnncim/action-label-syncer from 1 to 1.2.0

Bumps [micnncim/action-label-syncer](https://github.com/micnncim/action-label-syncer) from 1 to 1.2.0.
- [Release notes](https://github.com/micnncim/action-label-syncer/releases)
- [Commits](https://github.com/micnncim/action-label-syncer/compare/v1...v1.2.0)

Signed-off-by: dependabot[bot] <support@github.com>

Bump docker/login-action from 1 to 1.9.0

Bumps [docker/login-action](https://github.com/docker/login-action) from 1 to 1.9.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v1...v1.9.0)

Signed-off-by: dependabot[bot] <support@github.com>

Bump peter-evans/create-pull-request from 3 to 3.9.1

Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 3 to 3.9.1.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v3...v3.9.1)

Signed-off-by: dependabot[bot] <support@github.com>

registry:changed name to blocked-namespaces

changes list-of-namespaces to blocked-namespaces

Bump github.com/google/go-containerregistry from 0.5.0 to 0.5.1

Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.5.0 to 0.5.1.
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](https://github.com/google/go-containerregistry/compare/v0.5.0...v0.5.1)

Signed-off-by: dependabot[bot] <support@github.com>

Bump micnncim/action-label-syncer from 1.2.0 to 1.3.0

Bumps [micnncim/action-label-syncer](https://github.com/micnncim/action-label-syncer) from 1.2.0 to 1.3.0.
- [Release notes](https://github.com/micnncim/action-label-syncer/releases)
- [Commits](https://github.com/micnncim/action-label-syncer/compare/v1.2.0...v1.3.0)

Signed-off-by: dependabot[bot] <support@github.com>

Bump github.com/onsi/gomega from 1.12.0 to 1.13.0

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.12.0 to 1.13.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.12.0...v1.13.0)

Signed-off-by: dependabot[bot] <support@github.com>

Bump actions/cache from 2.1.5 to 2.1.6

Bumps [actions/cache](https://github.com/actions/cache) from 2.1.5 to 2.1.6.
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](https://github.com/actions/cache/compare/v2.1.5...v2.1.6)

Signed-off-by: dependabot[bot] <support@github.com>

Bump peter-evans/create-pull-request from 3.9.1 to 3.9.2

Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 3.9.1 to 3.9.2.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v3.9.1...v3.9.2)

Signed-off-by: dependabot[bot] <support@github.com>

Bump peter-evans/create-pull-request from 3.9.2 to 3.10.0

Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 3.9.2 to 3.10.0.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v3.9.2...v3.10.0)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

fixes blocked_namespaces get input list type

Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>
2021-06-05 03:01:15 +05:30
Ben Hale e30e95ef4e
Optimistic Locking
This change adds optimistic locking to all the actions that need to update
data on GitHub.  It does this using the standard `CreateFile` invocation with
the previous SHA (almost like it was designed for this 😇) and retrying with an
exponential backoff.

Signed-off-by: Ben Hale <bhale@vmware.com>
2020-12-14 13:10:22 -08:00
Ben Hale f9e5484fd3
More Moving Around
Signed-off-by: Ben Hale <bhale@vmware.com>
2020-12-14 13:09:44 -08:00