dependabot[bot]
e1ae3ad52e
build(deps): bump anchore/sbom-action from 0.14.1 to 0.14.2
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.14.1 to 0.14.2.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Commits](422cb34a0f...4d571ad103 )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-05-08 03:05:32 +00:00
dependabot[bot]
02f5c0d137
build(deps): bump github/codeql-action from 2.3.0 to 2.3.2
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.3.0 to 2.3.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](b2c19fb9a2...f3feb00acb )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-05-01 08:41:10 +00:00
dependabot[bot]
5672cdd0e3
build(deps): bump actions/checkout from 3.5.0 to 3.5.2
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.5.0 to 3.5.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](8f4b7f8486...8e5e7e5ab8 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-05-01 08:10:36 +00:00
dependabot[bot]
153f571d6d
build(deps): bump docker/metadata-action from 4.3.0 to 4.4.0
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 4.3.0 to 4.4.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](507c2f2dc5...c4ee3adeed )
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-05-01 07:49:22 +00:00
dependabot[bot]
e99c01a264
build(deps): bump sigstore/cosign-installer from 3.0.2 to 3.0.3
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](9e9de2292d...204a51a57a )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-05-01 03:12:11 +00:00
dependabot[bot]
628ca23918
build(deps): bump github/codeql-action from 2.2.12 to 2.3.0
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.2.12 to 2.3.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](7df0ce3489...b2c19fb9a2 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-04-24 03:07:41 +00:00
dependabot[bot]
66395149f1
build(deps): bump github/codeql-action from 2.2.11 to 2.2.12
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.2.11 to 2.2.12.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](d186a2a36c...7df0ce3489 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-04-17 03:06:57 +00:00
dependabot[bot]
2692bcdca1
build(deps): bump sigstore/cosign-installer from 3.0.1 to 3.0.2
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](c3667d9942...9e9de2292d )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-04-10 07:49:17 +00:00
dependabot[bot]
758e9dc764
build(deps): bump github/codeql-action from 2.2.9 to 2.2.11
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.2.9 to 2.2.11.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](04df1262e6...d186a2a36c )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-04-10 03:08:30 +00:00
dependabot[bot]
0d79f4b775
build(deps): bump anchore/sbom-action from 0.13.4 to 0.14.1
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.13.4 to 0.14.1.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Commits](448520c4f1...422cb34a0f )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-04-03 03:05:32 +00:00
Stefan Prodan
e0eb0aa034
ci: Remove the macOS runner
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2023-03-30 13:23:54 +03:00
Hidde Beydals
bc1615cdcc
build: update workflow dependencies
...
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-03-29 16:46:26 +02:00
Hidde Beydals
4081e4bc2f
build: update verify workflow
...
- Update actions to their latest versions.
- Use SHA to (potentially) allow enabling Dependabot.
- Move caching responsibility to `actions/setup-go` (supported since
>=v3).
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-03-21 14:16:39 +01:00
Hidde Beydals
85bde48a7e
build: update tests workflow
...
- Update actions to their latest versions.
- Use SHA to (potentially) allow enabling Dependabot.
- Add Go Modules caching using `actions/setup-go` (supported since
>=v3).
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-03-21 14:16:03 +01:00
Hidde Beydals
40ab611fc2
build: update scan workflow
...
- Update actions to their latest versions.
- Use SHA to (potentially) allow enabling Dependabot.
- Add Go Modules caching using `actions/setup-go` (supported since
>=v3).
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-03-21 14:14:09 +01:00
Hidde Beydals
4286a7a254
build: update release workflow
...
- Update actions to their latest versions.
- Use SHA to (potentially) allow enabling Dependabot.
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-03-21 14:12:14 +01:00
Hidde Beydals
ccaaded0b9
build: update e2e workflow
...
- Update actions to their latest versions.
- Use SHA to (potentially) allow enabling Dependabot.
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-03-21 14:08:53 +01:00
Hidde Beydals
00f737a481
build: update e2e workflow
...
- Update actions to their latest versions.
- Use SHA to (potentially) allow enabling Dependabot.
- Move caching responsibility to `actions/setup-go` (supported since
>=v3).
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-03-21 14:07:15 +01:00
Hidde Beydals
402412b40d
build: update cifuzz workflow
...
- Update actions to their latest versions.
- Use SHA to (potentially) allow enabling Dependabot.
- Move caching responsibility to `actions/setup-go` (supported since
>=v3).
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-03-21 14:05:29 +01:00
Hidde Beydals
f0a58e015c
build: update nightly workflow
...
- docker/build-push-action to v4
- Drop `platforms` from `docker/setup-qemu-action` step, as this is
the default.
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-03-07 17:57:50 +01:00
Hidde Beydals
782b5fbcf1
build: update release workflow
...
- docker/build-push-action to v4
- sigstore/cosign-installer to v3
- goreleaser/goreleaser-action to v4
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-03-07 17:36:04 +01:00
Hidde Beydals
8dd9d2d7e8
Update Go to 1.20
...
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-03-02 15:20:36 +01:00
Hidde Beydals
7ee3c2c3e9
build: convert ::set-output to $GITHUB_OUTPUT
...
Signed-off-by: Hidde Beydals <hello@hidde.co>
2023-02-17 14:10:19 +01:00
Stefan Prodan
7814754bb7
CI: Replace engineerd/setup-kind with helm/kind-action
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2023-01-30 18:25:09 +02:00
Stefan Prodan
59e061c8ef
build: Enable SBOM and SLSA Provenance
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2023-01-27 16:45:41 +02:00
Hidde Beydals
2af954135a
darwin-amd64: setup Docker using Colima
...
Ref: https://github.com/abiosoft/colima/blob/main/docs/FAQ.md#cannot-connect-to-the-docker-daemon-at-unixvarrundockersock-is-the-docker-daemon-running
Signed-off-by: Hidde Beydals <hello@hidde.co>
2022-12-14 14:11:37 +00:00
Paulo Gomes
7a5e6f75f1
build: Disable macos-11
...
This specific environment seems to be more prone to a data race
that is already fixed on the git-refactoring branch. Whilst those
changes are not merged into main, let's disable this environment
to quieten the unnecessary noise.
Note that this test only exists to ensure that contributors using
macos-11 as their development environment don't experience
issues building and debugging the project.
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-10-20 10:01:22 +01:00
Paulo Gomes
6c06f4e222
The libgit2 libraries are downloaded and verified before
...
some of the make targets are executed. This assures the
provenance of such files before using them and is very
important specially for end users running such tests on
their machines.
Note that has been disabled specially due to recent issues
we experienced at CI which can be seen in:
fluxcd/source-controller#899
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-09-29 07:01:36 +01:00
Stefan Prodan
ca3496e758
Build with Go 1.19
...
- Update Go to 1.19 in CI
- Use Go 1.19 in base image
- Update controller-gen v0.8.0 and regenerate manifests
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-09-28 15:35:26 +03:00
Stefan Prodan
87b8efa02f
CI: Revert Public ECR push
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-09-09 11:23:39 +03:00
Stefan Prodan
8216175daa
CI: Set Public ECR region to us-east-1
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-09-07 18:46:49 +03:00
Stefan Prodan
3da8bf27b0
Publish container images to AWS Public ECR
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-09-07 10:41:23 +03:00
Paulo Gomes
976f4bb3fb
fuzz: Fix cache path
...
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-09-03 03:59:03 +01:00
Paulo Gomes
c2353a7fe6
fuzz: Ensure Go 1.18 for fuzz image
...
- Upgrade fuzz container to Go 1.18.
- Upgrade worker to Go 1.18.
- The mod replace in tests/fuzz was pointing to the wrong controller.
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-08-23 08:40:01 +01:00
Paulo Gomes
2ea8896c0b
build: Ignore CI workflows for markdown files
...
Running all CI tests at pull requests for some files is sub-optimal,
when a PR contain changes to a single file not checked by the tests.
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-08-08 16:22:45 +01:00
Philip Laine
0d633470eb
Update Azure Go SDK
...
Signed-off-by: Philip Laine <philip.laine@gmail.com>
2022-08-01 23:53:53 +02:00
Stefan Prodan
f2772eb9d3
Update Go to 1.18 in CI
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-07-27 19:02:19 +03:00
Max Jonas Werner
060d52d5f1
remove MacOS 10.15 from testing matrix
...
This version is not supported, anymore. More info at
https://github.com/actions/virtual-environments/issues/5583
Signed-off-by: Max Jonas Werner <max@e13.dev>
2022-07-27 12:21:16 +02:00
Paulo Gomes
c12a56a8a7
build: disable matrix fail-fast
...
Intermittent issues are causing the test matrix to fail
and whenever that happens, all other matrix options are
automatically cancelled. This increases the amount of
retries needed in order to get all tests to pass.
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-07-20 12:10:23 +01:00
Paulo Gomes
3635f44b5b
build: run darwin tests on macos 10.15, 11 and 12
...
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-07-06 13:52:53 +01:00
Paulo Gomes
6981eba031
build: split GitHub workflows
...
By splitting workflows we can get the overall time
for all the checks to be decreased.
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-07-01 11:58:08 +01:00
Paulo Gomes
230774cc80
build: disable go test -race for arm64
...
Race detection is not working properly in our arm64 runners.
It has been tested against both M1 and linux arm64 machines
and in both cases the results were aligned with the other
platforms.
By disabling this we can ensure race detection is being
enforced on the other platforms, and we can later review
this position.
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-06-14 11:33:36 +01:00
Paulo Gomes
e35eb7398d
Update GH Actions
...
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-05-26 14:57:34 +01:00
Hidde Beydals
d17e724124
build: properly wire integration tests
...
- Ensure secrets are set as env variables
- Wire `GO_TAGS` together with `GO_STATIC_FLAGS`
Signed-off-by: Hidde Beydals <hello@hidde.co>
2022-03-11 10:43:35 +01:00
Hidde Beydals
d55a75930c
Enable Azure integration tests
...
Tests are configured in such a way that they only run for `main`.
Signed-off-by: Hidde Beydals <hello@hidde.co>
2022-03-03 14:03:00 +01:00
Paulo Gomes
514126c4b8
Fix make test on arm64 runners
...
The environment variables set at the Makefile were causing go install to
yield a corrupted file for setup-envtest. To fix the issue, such operation
is now always executed in a clean bash.
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-02-16 10:17:33 +00:00
Paulo Gomes
fcb62eedc7
Validate LIBGIT2 args are set correctly
...
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-02-09 15:52:46 +00:00
Paulo Gomes
d8da814d2e
Initial fuzzing tests
...
This PR refactors and supersedes: https://github.com/fluxcd/source-controller/pull/443
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
Co-authored-by: Sanskar Jaiswal <sanskar.jaiswal@weave.works>
Co-authored-by: AdamKorcz <adam@adalogics.com>
2022-02-08 17:49:34 +00:00
Paulo Gomes
80e1d243e6
Upgrade to libgit2-1.1.1-6
...
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-02-08 10:51:20 +00:00
Paulo Gomes
c5e2e5e30b
Add make test execution for macos-10.15
...
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-02-07 18:36:18 +00:00