Commit Graph

160 Commits

Author SHA1 Message Date
dependabot[bot] f682cea494
Bump actions/setup-go from 3.0.0 to 3.1.0
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](f6164bd8c8...fcdc43634a)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-15 06:12:41 +00:00
naveensrinivasan 33b5787ed8
chore(deps): Included dependency review
> Dependency Review GitHub Action in your repository to enforce dependency
> reviews on your pull requests.
> The action scans for vulnerable versions of dependencies introduced by package version
> changes in pull requests,
> and warns you about the associated security vulnerabilities.
> This gives you better visibility of what's changing in a pull request,
> and helps prevent vulnerabilities being added to your repository.

https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-05-14 13:12:38 -05:00
Ciprian Hacman 03cb37aed2 Update Go to v1.18.1 2022-04-22 21:20:06 +03:00
Ciprian Hacman 2ca4a9bee3 Use golang 1.18.0 explicitly
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-03-29 07:22:16 +03:00
Ole Markus With 59631a1fff Use golang 1.18 for building 2022-03-28 20:24:09 +02:00
Ciprian Hacman 641ef62230
Apply suggestions from code review 2022-03-28 17:05:02 +03:00
dependabot[bot] a90c265a6f
Bump actions/setup-go from 2.2.0 to 3
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 2.2.0 to 3.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](bfdd3570ce...f6164bd8c8)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-03-28 13:29:58 +00:00
Kubernetes Prow Robot e2acdce433
Merge pull request #13423 from naveensrinivasan/naveen/feat/dependabot-githubactions
Included githubactions in dependabot config
2022-03-28 06:29:23 -07:00
Naveen 0990ea2338
Update .github/dependabot.yml
Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>
2022-03-27 20:57:40 -05:00
naveensrinivasan 712bf7fcfb Included githubactions in dependabot config
- Included githubactions in the dependabot config

This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.

Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot

GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot

https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-03-27 18:09:23 +00:00
naveensrinivasan b832368bf7 Pin actions to a full length commit SHA
- Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

>Pin actions to a full length commit SHA

>Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload.

https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions

Also, dependabot supports upgrading based on SHA.

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-03-27 18:05:05 +00:00
naveensrinivasan f48e39c2a1 Pinned action by SHA and included the URL for verification 2022-03-27 18:02:41 +00:00
John Gardiner Myers 7603f4ca46 Remove temporary restrictions on automatically tagging releases 2022-01-01 13:48:57 -08:00
John Gardiner Myers 8feb75f8e5 Add action for automatically tagging releases 2021-12-23 13:39:20 -08:00
Ciprian Hacman dfe088eb3e Update Go to v1.17.5 2021-12-13 12:48:11 +02:00
Ciprian Hacman 8cd0633e70 Update Go to v1.17.4 2021-12-06 05:38:25 +02:00
Ciprian Hacman 197f1cb689 Update Go to v1.17.3 2021-11-16 06:54:29 +02:00
Ciprian Hacman b5f582a93c Update Go to v1.17.2 2021-10-08 11:47:50 +03:00
Ciprian Hacman 5399c8d627 Update Go to v1.17.1 2021-09-20 06:47:49 +03:00
Ciprian Hacman 866804b72f Update Go to v1.16.8 2021-09-11 11:17:36 +03:00
Ciprian Hacman b7cd8a5e0a Update Go to v1.16.7
https://golang.org/doc/devel/release#go1.16.minor
2021-08-14 07:09:31 +03:00
Ciprian Hacman c7d131f00c Update Go to v1.16.5 2021-06-04 10:48:56 +03:00
John Gardiner Myers 8c9a5bb0d1 Label issue types in issue templates 2021-05-30 15:05:13 -07:00
Ciprian Hacman 80ee477727 Update Go to v1.16.4 2021-05-29 11:31:22 +03:00
Barry Melbourne 747199e787 Update Go to v1.16.3 2021-04-04 14:50:24 +01:00
Ciprian Hacman 0999651132 Update Go to v1.16.2 2021-03-13 07:23:30 +02:00
Barry Melbourne 1a6ff4efbf Update Go to v1.16 2021-03-04 18:41:48 +00:00
Ciprian Hacman 6df69cf71a Update Go to v1.15.8 2021-02-17 07:32:38 +02:00
Ciprian Hacman f2461ca34e Update Go to v1.15.7 2021-01-20 06:52:05 +02:00
Barry Melbourne f2ecb5c153 Upgrade Go v1.15.6 / Bazel v3.4.1 2021-01-10 18:13:12 +00:00
Ciprian Hacman bfbd4123e7 Rename duplicate ci target to quick-ci 2020-12-07 13:03:52 +02:00
Ciprian Hacman 894ebedc5c Remove dependency on TravisCI 2020-12-04 20:28:23 +02:00
Ciprian Hacman 8eb99e30fb Update Go to v1.15.5 2020-11-15 12:32:24 +02:00
Ciprian Hacman 6228c79b88 Update Go to v1.15.4 2020-11-10 21:20:22 +02:00
Ciprian Hacman 7d4f2cc2be Update Go to v1.15.2 2020-09-15 17:54:05 +03:00
Ciprian Hacman 224e19179e Update Go to v1.15.1 2020-09-07 05:56:46 +03:00
Peter Rifel 3afb390c5c
Upgrade CI jobs to go 1.15.0
These were failing, apparently the RC is no longer available once the stable release lands.
We can bump bazel rules_go once it is released.
2020-08-11 16:42:41 -05:00
Ciprian Hacman 9995940677 Add Windows job to GH workflows 2020-08-11 14:28:36 +03:00
Kubernetes Prow Robot e5d851373e
Merge pull request #9709 from hakman/go1.15rc2
Update Go to v1.15rc2
2020-08-08 00:56:19 -07:00
Ciprian Hacman ba66477a26 Update Go to v1.15rc2 2020-08-08 10:12:45 +03:00
Peter Rifel 3971708a4c
Add markdown code block to bug report GH issue template 2020-08-06 10:05:11 -05:00
Ciprian Hacman 2401106ebb Upgrade Go to version 1.15rc1 2020-07-29 06:42:44 +03:00
Ciprian Hacman 653165daff Rename workflow to CI 2020-07-12 20:43:31 +03:00
Ciprian Hacman 48f50c7f6b Build all instead of nodeup for linux 2020-07-12 20:37:14 +03:00
Ciprian Hacman 46a59fc637 Build kops instead of nodeup for macOS 2020-07-12 20:36:36 +03:00
Ciprian Hacman b7491a176d Use actions/setup-go@v2 2020-07-12 04:45:12 +03:00
Ciprian Hacman bf42e32622 Use stable names for GH workflow jobs 2020-07-12 04:27:55 +03:00
Peter Rifel 6b6692494f
Revert "try github actions failures to see if PRs can't be merged"
This reverts commit b85c0a47e5.
2020-06-17 23:18:58 -05:00
Peter Rifel b85c0a47e5
try github actions failures to see if PRs can't be merged 2020-06-17 22:42:33 -05:00
mikesplain 2e79240df1
Add comment on blocking jobs to actions 2020-06-08 15:17:39 -04:00
John Gardiner Myers f834963bad Don't restrict GitHub Actions to master 2020-05-03 20:40:30 -07:00
Nathaniel Irons 699a9a93aa Drop go 1.14 on macOS 2020-04-26 12:11:35 -07:00
Nathaniel Irons d6b80fc305 Add initial github actions workflow 2020-04-25 23:49:25 -07:00
Mike Splain 51a3200fc1 Update Issue templates and add PR template 2018-07-21 16:24:37 -04:00
mahuihuang 2d535d590c fix an error 2018-04-09 11:05:16 +08:00
chrislovecnm faf5ea2e14 updates from PR review 2017-11-16 14:07:15 -07:00
chrislovecnm f514690fa4 Updating template with better formatting 2017-11-16 14:07:14 -07:00
chrislovecnm d92f34ec32 thining out issue template 2017-09-29 16:46:57 -06:00
Kris Nova d5d8d18798 Silence github noise until we confirm 2017-02-01 01:34:59 -07:00
Scott Webber 77e98e3508 Added .github folder and ISSUE_TEMPLATE
Update to Isses Template
2017-01-05 10:52:08 -08:00