dependabot[bot]
|
a90c265a6f
|
Bump actions/setup-go from 2.2.0 to 3
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 2.2.0 to 3.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](bfdd3570ce...f6164bd8c8)
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-03-28 13:29:58 +00:00 |
Kubernetes Prow Robot
|
e2acdce433
|
Merge pull request #13423 from naveensrinivasan/naveen/feat/dependabot-githubactions
Included githubactions in dependabot config
|
2022-03-28 06:29:23 -07:00 |
Naveen
|
0990ea2338
|
Update .github/dependabot.yml
Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>
|
2022-03-27 20:57:40 -05:00 |
naveensrinivasan
|
712bf7fcfb
|
Included githubactions in dependabot config
- Included githubactions in the dependabot config
This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.
Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot
GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
|
2022-03-27 18:09:23 +00:00 |
naveensrinivasan
|
b832368bf7
|
Pin actions to a full length commit SHA
- Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
>Pin actions to a full length commit SHA
>Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload.
https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions
Also, dependabot supports upgrading based on SHA.
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
|
2022-03-27 18:05:05 +00:00 |
naveensrinivasan
|
f48e39c2a1
|
Pinned action by SHA and included the URL for verification
|
2022-03-27 18:02:41 +00:00 |
John Gardiner Myers
|
7603f4ca46
|
Remove temporary restrictions on automatically tagging releases
|
2022-01-01 13:48:57 -08:00 |
John Gardiner Myers
|
8feb75f8e5
|
Add action for automatically tagging releases
|
2021-12-23 13:39:20 -08:00 |
Ciprian Hacman
|
dfe088eb3e
|
Update Go to v1.17.5
|
2021-12-13 12:48:11 +02:00 |
Ciprian Hacman
|
8cd0633e70
|
Update Go to v1.17.4
|
2021-12-06 05:38:25 +02:00 |
Ciprian Hacman
|
197f1cb689
|
Update Go to v1.17.3
|
2021-11-16 06:54:29 +02:00 |
Ciprian Hacman
|
b5f582a93c
|
Update Go to v1.17.2
|
2021-10-08 11:47:50 +03:00 |
Ciprian Hacman
|
5399c8d627
|
Update Go to v1.17.1
|
2021-09-20 06:47:49 +03:00 |
Ciprian Hacman
|
866804b72f
|
Update Go to v1.16.8
|
2021-09-11 11:17:36 +03:00 |
Ciprian Hacman
|
b7cd8a5e0a
|
Update Go to v1.16.7
https://golang.org/doc/devel/release#go1.16.minor
|
2021-08-14 07:09:31 +03:00 |
Ciprian Hacman
|
c7d131f00c
|
Update Go to v1.16.5
|
2021-06-04 10:48:56 +03:00 |
John Gardiner Myers
|
8c9a5bb0d1
|
Label issue types in issue templates
|
2021-05-30 15:05:13 -07:00 |
Ciprian Hacman
|
80ee477727
|
Update Go to v1.16.4
|
2021-05-29 11:31:22 +03:00 |
Barry Melbourne
|
747199e787
|
Update Go to v1.16.3
|
2021-04-04 14:50:24 +01:00 |
Ciprian Hacman
|
0999651132
|
Update Go to v1.16.2
|
2021-03-13 07:23:30 +02:00 |
Barry Melbourne
|
1a6ff4efbf
|
Update Go to v1.16
|
2021-03-04 18:41:48 +00:00 |
Ciprian Hacman
|
6df69cf71a
|
Update Go to v1.15.8
|
2021-02-17 07:32:38 +02:00 |
Ciprian Hacman
|
f2461ca34e
|
Update Go to v1.15.7
|
2021-01-20 06:52:05 +02:00 |
Barry Melbourne
|
f2ecb5c153
|
Upgrade Go v1.15.6 / Bazel v3.4.1
|
2021-01-10 18:13:12 +00:00 |
Ciprian Hacman
|
bfbd4123e7
|
Rename duplicate ci target to quick-ci
|
2020-12-07 13:03:52 +02:00 |
Ciprian Hacman
|
894ebedc5c
|
Remove dependency on TravisCI
|
2020-12-04 20:28:23 +02:00 |
Ciprian Hacman
|
8eb99e30fb
|
Update Go to v1.15.5
|
2020-11-15 12:32:24 +02:00 |
Ciprian Hacman
|
6228c79b88
|
Update Go to v1.15.4
|
2020-11-10 21:20:22 +02:00 |
Ciprian Hacman
|
7d4f2cc2be
|
Update Go to v1.15.2
|
2020-09-15 17:54:05 +03:00 |
Ciprian Hacman
|
224e19179e
|
Update Go to v1.15.1
|
2020-09-07 05:56:46 +03:00 |
Peter Rifel
|
3afb390c5c
|
Upgrade CI jobs to go 1.15.0
These were failing, apparently the RC is no longer available once the stable release lands.
We can bump bazel rules_go once it is released.
|
2020-08-11 16:42:41 -05:00 |
Ciprian Hacman
|
9995940677
|
Add Windows job to GH workflows
|
2020-08-11 14:28:36 +03:00 |
Kubernetes Prow Robot
|
e5d851373e
|
Merge pull request #9709 from hakman/go1.15rc2
Update Go to v1.15rc2
|
2020-08-08 00:56:19 -07:00 |
Ciprian Hacman
|
ba66477a26
|
Update Go to v1.15rc2
|
2020-08-08 10:12:45 +03:00 |
Peter Rifel
|
3971708a4c
|
Add markdown code block to bug report GH issue template
|
2020-08-06 10:05:11 -05:00 |
Ciprian Hacman
|
2401106ebb
|
Upgrade Go to version 1.15rc1
|
2020-07-29 06:42:44 +03:00 |
Ciprian Hacman
|
653165daff
|
Rename workflow to CI
|
2020-07-12 20:43:31 +03:00 |
Ciprian Hacman
|
48f50c7f6b
|
Build all instead of nodeup for linux
|
2020-07-12 20:37:14 +03:00 |
Ciprian Hacman
|
46a59fc637
|
Build kops instead of nodeup for macOS
|
2020-07-12 20:36:36 +03:00 |
Ciprian Hacman
|
b7491a176d
|
Use actions/setup-go@v2
|
2020-07-12 04:45:12 +03:00 |
Ciprian Hacman
|
bf42e32622
|
Use stable names for GH workflow jobs
|
2020-07-12 04:27:55 +03:00 |
Peter Rifel
|
6b6692494f
|
Revert "try github actions failures to see if PRs can't be merged"
This reverts commit b85c0a47e5.
|
2020-06-17 23:18:58 -05:00 |
Peter Rifel
|
b85c0a47e5
|
try github actions failures to see if PRs can't be merged
|
2020-06-17 22:42:33 -05:00 |
mikesplain
|
2e79240df1
|
Add comment on blocking jobs to actions
|
2020-06-08 15:17:39 -04:00 |
John Gardiner Myers
|
f834963bad
|
Don't restrict GitHub Actions to master
|
2020-05-03 20:40:30 -07:00 |
Nathaniel Irons
|
699a9a93aa
|
Drop go 1.14 on macOS
|
2020-04-26 12:11:35 -07:00 |
Nathaniel Irons
|
d6b80fc305
|
Add initial github actions workflow
|
2020-04-25 23:49:25 -07:00 |
Mike Splain
|
51a3200fc1
|
Update Issue templates and add PR template
|
2018-07-21 16:24:37 -04:00 |
mahuihuang
|
2d535d590c
|
fix an error
|
2018-04-09 11:05:16 +08:00 |
chrislovecnm
|
faf5ea2e14
|
updates from PR review
|
2017-11-16 14:07:15 -07:00 |
chrislovecnm
|
f514690fa4
|
Updating template with better formatting
|
2017-11-16 14:07:14 -07:00 |
chrislovecnm
|
d92f34ec32
|
thining out issue template
|
2017-09-29 16:46:57 -06:00 |
Kris Nova
|
d5d8d18798
|
Silence github noise until we confirm
|
2017-02-01 01:34:59 -07:00 |
Scott Webber
|
77e98e3508
|
Added .github folder and ISSUE_TEMPLATE
Update to Isses Template
|
2017-01-05 10:52:08 -08:00 |