Matt Farina
334f5ed87e
Merge pull request #13330 from helm/dependabot/github_actions/actions/checkout-4.1.7
...
Bump actions/checkout from 4.1.1 to 4.1.7
2024-09-13 15:37:32 -04:00
Robert Sirchia
8642225be3
Fixing the action trigger
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-09-13 15:22:57 -04:00
Robert Sirchia
5217ea8f18
testing permissing for codeql
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-09-13 15:18:24 -04:00
dependabot[bot]
144e7b0287
Bump actions/checkout from 4.1.1 to 4.1.7
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.1 to 4.1.7.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4.1.1...692973e3d937129bcbf40652eb9f2f61becf3332 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-09-12 21:10:20 +00:00
Joe Julian
ef2719448b
Merge pull request #13233 from harshitasao/issue-13131
...
Added the scorecard github action and its badge
2024-09-12 09:13:41 -07:00
Joe Julian
1a55457375
Merge pull request #13259 from harshitasao/scorecard-checks-fix
...
fix: fixed the token-permission and pinned-dependencies issue
2024-09-12 09:12:47 -07:00
Robert Sirchia
e7b25bab6f
bumping version to 1.22.7
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-09-11 15:44:13 -04:00
Robert Sirchia
5326d79d3e
refectoring to ONE GH action
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-09-06 15:17:32 -04:00
Robert Sirchia
d91188159e
adding new lines at the end of each files
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-09-06 15:09:48 -04:00
Robert Sirchia
1aa640fe1d
changing the trigger file
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-09-06 11:47:06 -04:00
Robert Sirchia
3ef6dd4036
changing trigger file from go.sum to go.mod
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-09-06 11:41:45 -04:00
Robert Sirchia
5f15f53e2e
removing govulncheck from build-test
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-09-06 11:38:40 -04:00
Robert Sirchia
4df7d5628b
adding new workflows for govulncheck
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-09-06 11:37:08 -04:00
Robert Sirchia
88fa81ecb6
adding a new line at the end of the file as per the request of the maintainers
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-08-30 16:39:08 -04:00
Robert Sirchia
76b9d962f0
restoring the original triggers that were removed for testing
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-08-30 16:34:28 -04:00
Robert Sirchia
38dd4a7fea
moving govulncheck to a seperate job
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-08-30 16:31:11 -04:00
Robert Sirchia
1ad6af9287
removing specific go version for govulncheck
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-08-30 16:20:15 -04:00
Robert Sirchia
e46e0ddb98
updating go version for govulncheck
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-08-30 16:13:33 -04:00
Robert Sirchia
6757f8a81b
fixing directory for go-packages
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-08-30 16:04:08 -04:00
Robert Sirchia
031b34458e
changing the triggers to test this GH actions
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-08-30 15:56:13 -04:00
Robert Sirchia
7e3df4baaf
Adding in workflow_call to test GH Actions
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-08-30 15:48:23 -04:00
Robert Sirchia
eba0f78a47
Merge branch 'helm:main' into adding-goland-govulncheck-action
2024-08-30 15:17:48 -04:00
dependabot[bot]
e448aae04e
Bump github/codeql-action from 3.26.3 to 3.26.6
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.26.3 to 3.26.6.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](883d8588e5...4dd16135b6 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-08-29 21:47:08 +00:00
Robert Sirchia
b351fdce99
adding workflow_dispatch to test
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-08-28 16:39:48 -04:00
Robert Sirchia
67617290d4
adding govulncheck
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2024-08-28 15:40:37 -04:00
dependabot[bot]
c58cb9a529
Bump github/codeql-action from 3.26.2 to 3.26.3
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.26.2 to 3.26.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](429e197704...883d8588e5 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-08-19 21:54:51 +00:00
harshitasao
b4caed94cd
fix: fixed the token-permission and pinned-dependencies issue
...
Signed-off-by: harshitasao <harshitasao@gmail.com>
2024-08-18 08:55:55 +05:30
dependabot[bot]
83874d9edd
Bump github/codeql-action from 3.26.1 to 3.26.2
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.26.1 to 3.26.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](29d86d22a3...429e197704 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-08-14 21:56:11 +00:00
dependabot[bot]
990dbf671c
Bump github/codeql-action from 3.26.0 to 3.26.1
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.26.0 to 3.26.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](eb055d739a...29d86d22a3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-08-13 21:40:11 +00:00
Matt Farina
abdbe1ed34
Merge pull request #13217 from helm/dependabot/github_actions/golangci/golangci-lint-action-6.1.0
...
Bump golangci/golangci-lint-action from 6.0.1 to 6.1.0
2024-08-07 15:29:53 -04:00
dependabot[bot]
5bbe19a479
Bump github/codeql-action from 3.25.15 to 3.26.0
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.25.15 to 3.26.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](afb54ba388...eb055d739a )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-08-06 22:12:52 +00:00
harshitasao
ae17dea00d
Added the scorecard github action and its badge
...
Signed-off-by: harshitasao <harshitasao@gmail.com>
2024-08-06 05:39:03 +05:30
dependabot[bot]
f293480688
Bump golangci/golangci-lint-action from 6.0.1 to 6.1.0
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6.0.1 to 6.1.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](a4f60bb28d...aaa42aa062 )
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-07-30 21:35:42 +00:00
dependabot[bot]
8c1bfc7c99
Bump github/codeql-action from 3.25.13 to 3.25.15
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.25.13 to 3.25.15.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](2d790406f5...afb54ba388 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-07-26 21:58:51 +00:00
dependabot[bot]
856d57600d
Bump github/codeql-action from 3.25.12 to 3.25.13
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.25.12 to 3.25.13.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](4fa2a79536...2d790406f5 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-07-19 21:25:02 +00:00
Matt Farina
878af3ef1d
Merge pull request #13170 from helm/dependabot/github_actions/actions/setup-go-5.0.2
...
Bump actions/setup-go from 5.0.1 to 5.0.2
2024-07-15 09:06:36 -04:00
dependabot[bot]
168c48be99
Bump github/codeql-action from 3.25.11 to 3.25.12
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.25.11 to 3.25.12.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](b611370bb5...4fa2a79536 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-07-12 21:36:27 +00:00
dependabot[bot]
98e2af96d5
Bump actions/setup-go from 5.0.1 to 5.0.2
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.0.1 to 5.0.2.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](cdcb360436...0a12ed9d6a )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-07-10 21:12:50 +00:00
Joe Julian
8f7e8ed3ee
Merge pull request #13103 from helm/dependabot/github_actions/actions/checkout-4.1.7
...
Bump actions/checkout from 4.1.1 to 4.1.7
2024-07-08 16:40:05 -07:00
dependabot[bot]
d59d0de4a6
Bump github/codeql-action from 3.25.10 to 3.25.11
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.25.10 to 3.25.11.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](23acc5c183...b611370bb5 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-06-28 21:07:40 +00:00
dependabot[bot]
b4f71678b0
Bump github/codeql-action from 3.25.9 to 3.25.10
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.25.9 to 3.25.10.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](530d4feaa9...23acc5c183 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-06-13 21:11:59 +00:00
dependabot[bot]
a13a353a3e
Bump actions/checkout from 4.1.1 to 4.1.7
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.1 to 4.1.7.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](b4ffde65f4...692973e3d9 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-06-12 21:37:38 +00:00
dependabot[bot]
7e6904ecdf
Bump github/codeql-action from 3.25.8 to 3.25.9
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.25.8 to 3.25.9.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](2e230e8fe0...530d4feaa9 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-06-12 21:37:32 +00:00
dependabot[bot]
ca98970158
Bump github/codeql-action from 3.25.7 to 3.25.8
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.25.7 to 3.25.8.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](f079b84933...2e230e8fe0 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-06-10 18:29:36 +00:00
dependabot[bot]
6ae643892d
Bump github/codeql-action from 3.25.6 to 3.25.7
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.25.6 to 3.25.7.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](9fdb3e4972...f079b84933 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-05-31 21:33:32 +00:00
Matt Farina
691f313442
Merge pull request #13059 from mattfarina/fix-build-tag
...
Fixing build issue where wrong version is used
2024-05-23 10:05:00 -04:00
Matt Farina
0b64775386
Fixing build issue where wrong version is used
...
The release process had selected the tag to use as the version
automatically. But, this presented a problem when a release
candidate and final release pointed to the same commit id. For a
long time it had automatically selected the final release. But,
we ran into a problem where it selected the RC tag instead of the
final release.
This change explicitly tells the build scripts the version to use
based on the tag passed into the CI run. It should no longer try
to self discover the version.
Closes #13040
Signed-off-by: Matt Farina <matt@mattfarina.com>
2024-05-22 14:05:24 -04:00
dependabot[bot]
5e31004068
---
...
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-05-20 21:48:18 +00:00
Matt Farina
7a7782478b
Merge pull request #13019 from helm/dependabot/github_actions/golangci/golangci-lint-action-6.0.1
...
chore(deps): bump golangci/golangci-lint-action from 4.0.0 to 6.0.1
2024-05-14 09:22:06 -04:00
dependabot[bot]
63ba35541a
chore(deps): bump github/codeql-action from 3.25.4 to 3.25.5
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.25.4 to 3.25.5.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](ccf74c9479...b7cec75265 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-05-13 22:05:13 +00:00