asraa and GitHub
eea3a5d3af
fix: properly handle sharded uuids returned from rekor ( #140 )
...
* fix: properly handle sharded uuids returned from rekor
Signed-off-by: Asra Ali <asraa@google.com >
* update to 1.18
Signed-off-by: Asra Ali <asraa@google.com >
* fix test
Signed-off-by: Asra Ali <asraa@google.com >
2022-07-11 13:17:52 -07:00
a72bb2573e
🌱 Bump actions/setup-go from 3.1.0 to 3.2.0 ( #70 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/fcdc43634adb5f7ae75a9d7a9b9361790f7293e2...b22fbbc2921299758641fab08929b4ac52b32923 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-27 07:32:03 -07:00
laurentsimon and GitHub
f9e31da2a5
✨ Allow main branch only for trusted builder and e2e tests repos ( #63 )
...
* updates
* updates
* updates
* updates
* updates
* updates
* updates
* updates
* updates
* updates
* Fix unit tests
* unit tests
* updates
* updates
* updates
* updates
* updates
2022-05-26 15:31:05 +00:00
87c99259e0
🌱 Bump actions/setup-go from 3.0.0 to 3.1.0 ( #54 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/f6164bd8c8acb4a71fb2791a8b6c4024ff038dab...fcdc43634adb5f7ae75a9d7a9b9361790f7293e2 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com >
2022-05-26 15:16:27 +00:00
ae2d059cef
🌱 Bump actions/dependency-review-action from 1.0.1 to 1.0.2 ( #62 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 1.0.1 to 1.0.2.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](https://github.com/actions/dependency-review-action/compare/39e692fa323107ef86d8fdac0067ce647f239bd7...a9c83d3af6b9031e20feba03b904645bb23d1dab )
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-24 17:25:33 -07:00
5688cc79ad
🌱 Bump actions/dependency-review-action from 1.0.0 to 1.0.1 ( #58 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](https://github.com/actions/dependency-review-action/compare/3f943b86c9a289f4e632c632695e2e0898d9d67d...39e692fa323107ef86d8fdac0067ce647f239bd7 )
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com >
2022-05-23 18:57:04 +00:00
laurentsimon and GitHub
74840d4cc7
updates ( #48 )
2022-05-06 08:44:46 -05:00
54a8196e78
🌱 Bump github/codeql-action from 1 to 2 ( #39 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 1 to 2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-27 17:44:31 -07:00
Naveen and GitHub
c6a59bb827
Included dependency review check ( #33 )
...
> This action scans your pull requests for dependency changes and will raise an error if any
> new dependencies have existing vulnerabilities. The action is supported
> by an API endpoint that diffs the dependencies between any two revisions.
- Included the https://github.com/actions/dependency-review-action
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com >
2022-04-11 16:22:56 +00:00
32e4468647
🌱 Bump actions/checkout from 2 to 3 ( #15 )
...
* 🌱 Bump actions/checkout from 2 to 3
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
* update version comment
Signed-off-by: Asra Ali <asraa@google.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Asra Ali <asraa@google.com >
2022-03-31 11:37:16 -05:00
dd8b3460a8
🌱 Bump actions/setup-go from 2.2.0 to 3 ( #14 )
...
* 🌱 Bump actions/setup-go from 2.2.0 to 3
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 2.2.0 to 3.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/bfdd3570ce990073878bf10f6b2d79082de49492...f6164bd8c8acb4a71fb2791a8b6c4024ff038dab )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
* update version comment
Signed-off-by: Asra Ali <asraa@google.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Asra Ali <asraa@google.com >
2022-03-31 11:01:25 -05:00
Joshua Lock and GitHub
25528e0083
fix(codeql): fix branch wildcard ( #11 )
...
* is a special character in YAML, so we must use quotes
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#filter-pattern-cheat-sheet
Signed-off-by: Joshua Lock <jlock@vmware.com >
2022-03-29 18:02:06 +01:00
laurentsimon and GitHub
6cdcbf9a66
Transffer from github.com/gossts/slsa-provenance ( #1 )
2022-03-28 08:46:38 -07:00
asraaandGitHub
laurentsimonandGitHub
NaveenandGitHub
Joshua LockandGitHub