Jan-Kåre Solbakken
|
1bbcb31079
|
Use latest cosign
|
2023-11-29 10:40:10 +01:00 |
|
dependabot[bot]
|
95445a9305
|
build(deps): bump the gh-actions group with 1 update (#175)
Bumps the gh-actions group with 1 update: [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer).
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](11086d2504...1fc5bd396d)
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: gh-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-11-20 19:05:17 +00:00 |
|
dependabot[bot]
|
0b3cd4d9f6
|
build(deps): bump actions/checkout from 3 to 4
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-09-07 06:43:34 +00:00 |
|
dependabot[bot]
|
2d99cc1a60
|
build(deps): bump sigstore/cosign-installer from 3.1.1 to 3.1.2 (#155)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.1.1 to 3.1.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](6e04d228eb...11086d2504)
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-09-04 19:54:32 +00:00 |
|
dependabot[bot]
|
f8d6633abd
|
build(deps): bump actions/setup-go from 4.0.1 to 4.1.0 (#149)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4.0.1 to 4.1.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](fac708d667...93397bea11)
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-08-14 19:36:42 +00:00 |
|
Trong Huu Nguyen
|
28256089f1
|
build: bump to go 1.21
|
2023-08-10 13:41:44 +02:00 |
|
Trong Huu Nguyen
|
1843594c31
|
ci: always use latest go version
|
2023-07-12 15:20:58 +02:00 |
|
Trong Huu Nguyen
|
e0dc035cef
|
build: move back to official golang image, ratchet update
|
2023-07-12 15:12:26 +02:00 |
|
Trong Huu Nguyen
|
ff1cd3995a
|
ci: bump nais/platform-build-push-sign
|
2023-07-11 09:24:22 +02:00 |
|
Trong Huu Nguyen
|
73ab6aab93
|
ci: bump actions/setup-go to v4
|
2023-07-11 09:24:20 +02:00 |
|
Trong Huu Nguyen
|
566b9e1a2b
|
ci: enable multi-platform builds
|
2023-07-05 10:07:31 +02:00 |
|
Trong Huu Nguyen
|
39b8ea5d24
|
ci: use platform-build-push-sign
|
2023-07-05 09:57:31 +02:00 |
|
dependabot[bot]
|
8cc8cd72bb
|
build(deps): bump dependabot/fetch-metadata from 1.5.1 to 1.6.0 (#136)
Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) from 1.5.1 to 1.6.0.
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](https://github.com/dependabot/fetch-metadata/compare/v1.5.1...v1.6.0)
---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-07-03 20:03:12 +00:00 |
|
dependabot[bot]
|
f58c45730e
|
build(deps): bump sigstore/cosign-installer from 3.1.0 to 3.1.1 (#135)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](d13028333d...6e04d228eb)
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-07-03 20:01:27 +00:00 |
|
dependabot[bot]
|
2a7f1ecc78
|
build(deps): bump docker/setup-buildx-action from 2.7.0 to 2.8.0 (#134)
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 2.7.0 to 2.8.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](ecf95283f0...16c0bc4a6e)
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-07-03 19:59:42 +00:00 |
|
dependabot[bot]
|
f6ac588013
|
build(deps): bump sigstore/cosign-installer from 3.0.5 to 3.1.0 (#131)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.5 to 3.1.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](dd6b2e2b61...d13028333d)
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-26 19:59:20 +00:00 |
|
dependabot[bot]
|
b7ebcdb04d
|
build(deps): bump docker/setup-buildx-action from 2.6.0 to 2.7.0 (#124)
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 2.6.0 to 2.7.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](6a58db7e0d...ecf95283f0)
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-19 20:16:24 +00:00 |
|
dependabot[bot]
|
e4dfe64235
|
build(deps): bump docker/login-action from 2.1.0 to 2.2.0 (#127)
Bumps [docker/login-action](https://github.com/docker/login-action) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](f4ef78c080...465a07811f)
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-19 20:14:36 +00:00 |
|
dependabot[bot]
|
a8b3f08b97
|
build(deps): bump docker/build-push-action from 4.1.0 to 4.1.1 (#125)
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](44ea916f6c...2eb1c1961a)
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-19 20:05:41 +00:00 |
|
dependabot[bot]
|
6629f52082
|
build(deps): bump docker/metadata-action from 4.5.0 to 4.6.0 (#126)
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 4.5.0 to 4.6.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](2c0bd771b4...818d4b7b91)
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-19 19:59:42 +00:00 |
|
dependabot[bot]
|
8e633d6e30
|
build(deps): bump aquasecurity/trivy-action from 0.11.0 to 0.11.2 (#121)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.11.0 to 0.11.2.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](b43daad0c3...41f05d9ecf)
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-12 20:12:14 +00:00 |
|
dependabot[bot]
|
c5e08f7725
|
build(deps): bump docker/setup-buildx-action from 2.5.0 to 2.6.0 (#118)
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](4b4e9c3e2d...6a58db7e0d)
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-12 20:10:24 +00:00 |
|
dependabot[bot]
|
45f63e64bb
|
build(deps): bump docker/metadata-action from 4.4.0 to 4.5.0 (#119)
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 4.4.0 to 4.5.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](c4ee3adeed...2c0bd771b4)
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-12 20:08:35 +00:00 |
|
dependabot[bot]
|
9680fe447f
|
build(deps): bump docker/setup-qemu-action from 2.1.0 to 2.2.0 (#120)
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](e81a89b173...2b82ce82d5)
---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-12 20:06:01 +00:00 |
|
dependabot[bot]
|
606905b98e
|
build(deps): bump docker/build-push-action from 4.0.0 to 4.1.0 (#117)
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](3b5e8027fc...44ea916f6c)
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-12 19:58:46 +00:00 |
|
Trong Huu Nguyen
|
cb1392ec97
|
build: bump to go version 1.20.5
|
2023-06-09 13:52:36 +02:00 |
|
dependabot[bot]
|
6d79f97d05
|
build(deps): bump aquasecurity/trivy-action from 0.10.0 to 0.11.0 (#111)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.10.0 to 0.11.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](e5f43133f6...b43daad0c3)
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-05 19:59:46 +00:00 |
|
dependabot[bot]
|
6646ea28ad
|
build(deps): bump dependabot/fetch-metadata from 1.5.0 to 1.5.1 (#109)
Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) from 1.5.0 to 1.5.1.
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](https://github.com/dependabot/fetch-metadata/compare/v1.5.0...v1.5.1)
---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-05-29 19:59:19 +00:00 |
|
dependabot[bot]
|
aab4b972f5
|
build(deps): bump sigstore/cosign-installer from 3.0.3 to 3.0.5 (#105)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.3 to 3.0.5.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](204a51a57a...dd6b2e2b61)
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-05-22 20:06:12 +00:00 |
|
dependabot[bot]
|
59715d6073
|
build(deps): bump dependabot/fetch-metadata from 1.4.0 to 1.5.0 (#106)
Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](https://github.com/dependabot/fetch-metadata/compare/v1.4.0...v1.5.0)
---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-05-22 19:59:27 +00:00 |
|
dependabot[bot]
|
86e9340f9c
|
build(deps): bump actions/setup-go from 4.0.0 to 4.0.1 (#102)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4.0.0 to 4.0.1.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](4d34df0c23...fac708d667)
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-05-15 20:00:03 +00:00 |
|
dependabot[bot]
|
ae9448bf52
|
build(deps): bump google-github-actions/auth from 1.1.0 to 1.1.1 (#101)
Bumps [google-github-actions/auth](https://github.com/google-github-actions/auth) from 1.1.0 to 1.1.1.
- [Release notes](https://github.com/google-github-actions/auth/releases)
- [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md)
- [Commits](e8df18b60c...35b0e87d16)
---
updated-dependencies:
- dependency-name: google-github-actions/auth
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-05-08 19:59:23 +00:00 |
|
Trong Huu Nguyen
|
b806ecc787
|
build: bump to go version 1.20.4
|
2023-05-04 14:45:42 +02:00 |
|
dependabot[bot]
|
f90e57783b
|
build(deps): bump sigstore/cosign-installer from 3.0.2 to 3.0.3 (#97)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](9e9de2292d...204a51a57a)
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-05-01 20:00:07 +00:00 |
|
dependabot[bot]
|
b951d381f8
|
build(deps): bump dependabot/fetch-metadata from 1.3.6 to 1.4.0 (#95)
Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) from 1.3.6 to 1.4.0.
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](https://github.com/dependabot/fetch-metadata/compare/v1.3.6...v1.4.0)
---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-04-24 20:12:34 +00:00 |
|
dependabot[bot]
|
50cb7ca696
|
build(deps): bump docker/metadata-action from 4.3.0 to 4.4.0 (#93)
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 4.3.0 to 4.4.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](507c2f2dc5...c4ee3adeed)
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-04-24 20:10:17 +00:00 |
|
dependabot[bot]
|
f904fc0f22
|
build(deps): bump google-github-actions/auth from 1.0.0 to 1.1.0 (#94)
Bumps [google-github-actions/auth](https://github.com/google-github-actions/auth) from 1.0.0 to 1.1.0.
- [Release notes](https://github.com/google-github-actions/auth/releases)
- [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md)
- [Commits](ef5d53e30b...e8df18b60c)
---
updated-dependencies:
- dependency-name: google-github-actions/auth
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-04-24 20:05:50 +00:00 |
|
dependabot[bot]
|
f08ed3863a
|
build(deps): bump aquasecurity/trivy-action from 0.9.2 to 0.10.0 (#92)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.9.2 to 0.10.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](1f0aa582c8...e5f43133f6)
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-04-24 19:59:32 +00:00 |
|
Trong Huu Nguyen
|
9f14c94849
|
build: move tests and checks out from dockerfile
|
2023-04-21 16:13:09 +02:00 |
|
J-K. Solbakken
|
890159c166
|
use verified distroless images
|
2023-04-13 15:09:11 +02:00 |
|
Trong Huu Nguyen
|
b36942c38b
|
ci: add workflow for auto-merging dependabot PRs
|
2023-04-11 14:39:44 +02:00 |
|
Trong Huu Nguyen
|
ba6f689056
|
build(deps): bump
|
2023-04-11 14:35:04 +02:00 |
|
Trong Huu Nguyen
|
37557ddf2f
|
ci: only run codeql on schedule
|
2023-04-11 09:59:02 +02:00 |
|
dependabot[bot]
|
bd09b827f8
|
build(deps): bump sigstore/cosign-installer (#82)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-03-28 08:26:16 +02:00 |
|
Trong Huu Nguyen
|
bf964e42f2
|
build(deps): bump
|
2023-03-21 09:22:12 +01:00 |
|
J-K. Solbakken
|
2654f6d317
|
corrected copypasta error
|
2023-03-17 14:24:34 +01:00 |
|
J-K. Solbakken
|
57f3fa0b7d
|
sign and attest
|
2023-03-17 13:52:48 +01:00 |
|
Trong Huu Nguyen
|
c8a887dd01
|
build: bump to go version 1.20.2
|
2023-03-08 14:22:16 +01:00 |
|
Trong Huu Nguyen
|
c3532d2e60
|
build: bump to go version 1.20.1
|
2023-02-14 21:50:34 +01:00 |
|
Trong Huu Nguyen
|
9881bf5b44
|
build: bump to go version 1.20
|
2023-02-10 14:58:15 +01:00 |
|