diff --git a/.github/configs/lintconf.yaml b/.github/configs/lintconf.yaml index 577d81e6..191ee7ef 100644 --- a/.github/configs/lintconf.yaml +++ b/.github/configs/lintconf.yaml @@ -6,6 +6,11 @@ ignore: rules: truthy: level: warning + allowed-values: + - "true" + - "false" + - "on" + - "off" check-keys: false braces: min-spaces-inside: 0 diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml index c0015727..5ba8735a 100644 --- a/.github/workflows/coverage.yml +++ b/.github/workflows/coverage.yml @@ -14,28 +14,6 @@ concurrency: cancel-in-progress: true jobs: - compliance: - name: "License Compliance" - runs-on: ubuntu-24.04 - steps: - - name: "Checkout Code" - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - - name: Check secret - id: checksecret - uses: ./.github/actions/exists - with: - value: ${{ secrets.FOSSA_API_KEY }} - - name: "Run FOSSA Scan" - if: steps.checksecret.outputs.result == 'true' - uses: fossas/fossa-action@c0a7d013f84c8ee5e910593186598625513cc1e4 # v1.6.0 - with: - api-key: ${{ secrets.FOSSA_API_KEY }} - - name: "Run FOSSA Test" - if: steps.checksecret.outputs.result == 'true' - uses: fossas/fossa-action@c0a7d013f84c8ee5e910593186598625513cc1e4 # v1.6.0 - with: - api-key: ${{ secrets.FOSSA_API_KEY }} - run-tests: true sast: name: "SAST" runs-on: ubuntu-24.04 diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml index 94fe4068..b3f37441 100644 --- a/.github/workflows/e2e.yml +++ b/.github/workflows/e2e.yml @@ -34,14 +34,5 @@ jobs: - uses: azure/setup-helm@b9e51907a09c216f16ebe8536097933489208112 # v4 with: version: v3.14.2 - - name: unit tracing - run: sudo make trace-unit - - name: e2e tracing - run: sudo make trace-e2e - - name: build seccomp profile - run: make seccomp - - name: upload artifact - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 - with: - name: capsule-seccomp - path: capsule-seccomp.json + - name: e2e testing + run: make e2e diff --git a/.github/workflows/releaser.yml b/.github/workflows/releaser.yml index 00f7f557..6f2f9fdb 100644 --- a/.github/workflows/releaser.yml +++ b/.github/workflows/releaser.yml @@ -11,41 +11,41 @@ concurrency: cancel-in-progress: true jobs: - seccomp-generation: - name: Seccomp Generation - strategy: - fail-fast: false - matrix: - # differently from the e2e workflow - # we don't need all the versions of kubernetes - # to generate the seccomp profile. - k8s-version: - - "v1.30.0" - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - with: - fetch-depth: 0 - - uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0 - with: - go-version-file: 'go.mod' - - uses: azure/setup-helm@b9e51907a09c216f16ebe8536097933489208112 # v4 - with: - version: v3.14.2 - - name: unit tracing - run: sudo make trace-unit - - name: e2e tracing - run: sudo KIND_K8S_VERSION=${{ matrix.k8s-version }} make trace-e2e - - name: build seccomp profile - run: make seccomp - - name: upload artifact - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 - with: - name: capsule-seccomp - path: capsule-seccomp.json + #seccomp-generation: + # name: Seccomp Generation + # strategy: + # fail-fast: false + # matrix: + # # differently from the e2e workflow + # # we don't need all the versions of kubernetes + # # to generate the seccomp profile. + # k8s-version: + # - "v1.30.0" + # runs-on: ubuntu-latest + # steps: + # - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + # with: + # fetch-depth: 0 + # - uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0 + # with: + # go-version-file: 'go.mod' + # - uses: azure/setup-helm@b9e51907a09c216f16ebe8536097933489208112 # v4 + # with: + # version: v3.14.2 + # - name: unit tracing + # run: sudo make trace-unit + # - name: e2e tracing + # run: sudo KIND_K8S_VERSION=${{ matrix.k8s-version }} make trace-e2e + # - name: build seccomp profile + # run: make seccomp + # - name: upload artifact + # uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + # with: + # name: capsule-seccomp + # path: capsule-seccomp.json create-release: - needs: seccomp-generation + #needs: seccomp-generation runs-on: ubuntu-latest permissions: contents: write @@ -67,11 +67,11 @@ jobs: - uses: anchore/sbom-action/download-syft@5aeee89178a395035617e72a70928596d7ad2a85 - name: Install Cosign uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1 - - name: download artifact - uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1 - with: - name: capsule-seccomp - path: ./capsule-seccomp.json + #- name: download artifact + # uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1 + # with: + # name: capsule-seccomp + # path: ./capsule-seccomp.json - name: Run GoReleaser uses: goreleaser/goreleaser-action@9c156ee8a17a598857849441385a2041ef570552 # v6.3.0 with: diff --git a/.goreleaser.yml b/.goreleaser.yml index a37a2ed3..bf78139b 100644 --- a/.goreleaser.yml +++ b/.goreleaser.yml @@ -56,8 +56,8 @@ release: Thanks to all the contributors! 🚀 🦄 - extra_files: - - glob: ./capsule-seccomp.json + #extra_files: + # - glob: ./capsule-seccomp.json checksum: name_template: 'checksums.txt' changelog: diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index fc18315b..88cdc4c0 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -35,24 +35,8 @@ repos: entry: make helm-lint language: system files: ^charts/ - # Currently too slow smw - # - id: golangci-lint - # name: Execute golangci-lint - # entry: make golint - # language: system - # files: \.go$ -# - repo: https://github.com/tekwizely/pre-commit-golang -# rev: v1.0.0-rc.1 -# hooks: -# - id: go-vet -# - id: go-vet-mod -# - id: go-vet-pkg -# - id: go-vet-repo-mod -# - id: go-vet-repo-pkg -# - id: go-revive -# - id: go-revive-mod -# - id: go-revive-repo-mod -# - id: go-sec-mod -# - id: go-sec-pkg -# - id: go-sec-repo-mod -# - id: go-sec-repo-pkg + - id: golangci-lint + name: Execute golangci-lint + entry: make golint + language: system + files: \.go$ \ No newline at end of file diff --git a/ADOPTERS.md b/ADOPTERS.md index 7e786484..e4926946 100644 --- a/ADOPTERS.md +++ b/ADOPTERS.md @@ -7,6 +7,9 @@ This is a list of companies that have adopted Capsule, feel free to open a Pull- ### [Bedag Informatik AG](https://www.bedag.ch/) ![Bedag](https://www.bedag.ch/wGlobal/wGlobal/layout/images/logo.svg) +### [Begasoft AG](https://www.begasoft.ch) +![Begasoft](./assets/adopters/begasoft.png) + ### [Department of Defense](https://www.defense.gov/) ![United States Department of Defense](https://www.access-board.gov/images/dod-seal.png) diff --git a/assets/adopters/begasoft.png b/assets/adopters/begasoft.png new file mode 100644 index 00000000..b47545d4 Binary files /dev/null and b/assets/adopters/begasoft.png differ diff --git a/charts/capsule/ci/tracing-values.yaml b/charts/capsule/ci/tracing-draft.yaml similarity index 100% rename from charts/capsule/ci/tracing-values.yaml rename to charts/capsule/ci/tracing-draft.yaml