github/x509-certificate-exporter
1
0
Fork 0
mirror of https://github.com/enix/x509-certificate-exporter.git synced 2026-08-23 22:16:39 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,235 Commits 15 Branches 129 Tags
build/dagger-single-source
Commit Graph
215 Commits
Author SHA1 Message Date
Thibault VINCENT ed7c2eeb67 fix(ci): push dagger module sync with the App token and let Renovate ignore it 2026-08-04 15:58:46 +02:00
Thibault VINCENT a8d7a622d0 fix(ci): check out the fork repo when syncing the dagger module 2026-08-04 15:33:49 +02:00
Thibault VINCENT d349ce0aef build(dagger): derive the CLI version from dagger.json everywhere 2026-08-04 15:20:15 +02:00
enix-renovate[bot] 0332c8dc75 chore: update github-actions 2026-07-06 16:30:39 +02:00
enix-renovate[bot] c9525d9e41 chore: update actions/checkout action to v7 2026-06-30 18:41:58 +02:00
enix-renovate[bot] 0844fcdd0d chore: update dependency helm/helm to v4.2.2 2026-06-30 18:15:41 +02:00
enix-renovate[bot] f04a94a832 chore: update github-actions 2026-06-30 18:08:25 +02:00
Thibault VINCENT a1a454659e ci(security): drop persisted credentials on checkouts, shallow gitleaks fetch 2026-06-16 17:49:18 +02:00
Thibault VINCENT 1266ec8b74 ci(security): scan secrets via gitleaks CLI in Dagger, not gitleaks-action 2026-06-16 17:49:18 +02:00
Thibault VINCENT 8b058ba558 ci: bump action versions 2026-06-15 17:30:35 +02:00
enix-renovate[bot] 69e244467d chore: update github-actions 2026-06-15 16:57:44 +02:00
enix-renovate[bot] e66c84ad1d chore: update dependency helm/helm to v4.2.1 2026-06-15 16:57:15 +02:00
enix-renovate[bot] 32ae8bbb84 chore: update github-actions 2026-05-25 11:34:44 +02:00
enix-renovate[bot] 1b0b5b21ac chore: update dependency goreleaser/goreleaser to v2.16.0 2026-05-25 11:32:29 +02:00
Thibault VINCENT 8e3bdfe833 ci(codeql): exclude weak-sensitive-data-hashing for JKS/JCEKS HMAC 
The JKS/JCEKS wire format mandates SHA-1 in its keyed digest
(com.sun.crypto.provider.JceKeyStore.getPreKeyedHash). The exporter
verifies this digest before parsing — it never derives a key or signs
anything. Project-wide suppression is safe because the codebase has
no other password-hashing surface.
 2026-05-15 16:54:25 +02:00
Thibault VINCENT ca8e314ae8 bump(ci): upgrade actions 2026-05-15 15:41:05 +02:00
Thibault VINCENT bfdedde05c ci: update actions/create-github-app-token 2026-05-13 10:40:17 +02:00
enix-renovate[bot] 73ef68f5be chore: update github-actions 2026-05-11 11:13:47 +02:00
Thibault VINCENT abbb9b5fa8 feat(chart): values.schema.json with strict mode + helm-side regression tests 2026-05-06 01:21:22 +02:00
Thibault VINCENT 656f59a86a ci(lint): validate docs/examples values files against the chart 2026-05-05 23:44:50 +02:00
Thibault VINCENT 3cea78d2e4 ci(release): patch artifacthub.io/prerelease in chart/Chart.yaml from the tag 2026-05-05 16:16:43 +02:00
Thibault VINCENT 36d65e7e42 ci(release): merge chart publish and classic-index update into one job 2026-05-05 16:05:32 +02:00
Thibault VINCENT c40605674d ci(release): fix flaky upload of goreleaser assets to Github 2026-05-04 18:44:06 +02:00
Thibault VINCENT 963af055d2 ci(release): fix push path of classic helm index 2026-05-04 17:29:47 +02:00
Thibault VINCENT 58a7aebc47 fix(release): workflow call for classic helm assumes quay.io 2026-05-04 15:48:22 +02:00
Thibault VINCENT 53c788e2f0 ci(release): use the chart dedicated token for Oras 2026-05-04 14:25:54 +02:00
Thibault VINCENT 98eabf7e27 ci(release): add chart release to the classic helm repo 2026-05-04 13:41:08 +02:00
Thibault VINCENT f4379083cc chore(renovate): new manager to bump helm in workflows 2026-05-04 13:24:20 +02:00
Thibault VINCENT 5d820d0889 chore(renovate): pin goreleaser version pulled by the action 2026-05-04 10:50:29 +02:00
Thibault VINCENT 679b979a2f ci(release-please): workflow disabled 2026-05-04 04:06:13 +02:00
Thibault VINCENT 4a84907af9 ci(release): fix cosign chart auth, gate prerelease floating tags, dedup SBOMs 2026-05-04 02:30:23 +02:00
Thibault VINCENT 2515a87172 ci(release): missing registry login for cosign 2026-05-04 01:46:25 +02:00
Thibault VINCENT 1ec92ab53d ci(release): no need to run e2e tests on release 2026-05-03 17:50:06 +02:00
Thibault VINCENT fefccd3313 ci(release): make security a prerequisite for lint and test 2026-05-03 17:49:39 +02:00
Thibault VINCENT 15955c20ed ci(test): allow skipping e2e testing 2026-05-03 17:48:37 +02:00
Thibault VINCENT b0de8ba894 ci(lint): allow skipping individual lint jobs 2026-05-03 17:48:25 +02:00
Thibault VINCENT 282f6f833f ci(release): goreleaser needs the workflow token 2026-05-03 17:27:29 +02:00
Thibault VINCENT 991841b387 ci: fix release stuck on lint/security/test detecting no change 2026-05-03 17:04:58 +02:00
Thibault VINCENT b5e70677e4 ci(release): test workflow inherits non-release secrets 2026-05-03 16:46:08 +02:00
Thibault VINCENT 8fbdd80980 ci(renovate): use the workflow token for github 2/ 2026-05-02 18:01:24 +02:00
Thibault VINCENT 23a6c19fe3 ci(renovate): use the workflow token for github 2026-05-02 17:54:24 +02:00
Thibault VINCENT e26f205f0b ci(renovate): use readonly credentials for Docker Hub 2026-05-02 17:48:47 +02:00
Thibault VINCENT b39a2b97e1 ci(renovate): use Docker Hub credentials 2026-05-02 17:37:13 +02:00
Thibault VINCENT cbfbb2caa8 ci(codeql): switch to advanced mode with a workflow file 2026-05-02 16:04:14 +02:00
Thibault VINCENT 9a852d2309 bump(deps): manual pin and update of versions with renovate 2026-05-02 16:02:52 +02:00
Thibault VINCENT 31a4e2875a build(release): switch SLSA-3 provenance to actions/attest-build-provenance 2026-05-02 14:35:38 +02:00
Thibault VINCENT 26c207edea ci(release-pr): fix commit of chart annotations 2/ 2026-05-02 13:40:56 +02:00
Thibault VINCENT 837ad5e405 ci(release-pr): fix commit of chart annotations 2026-05-02 13:35:28 +02:00
Thibault VINCENT f813ddd8ad ci: silence dagger nag 2026-05-02 13:34:43 +02:00
Thibault VINCENT c571198732 ci: pin actions with renovate only ; drop ratchet from the repo 
They had incompatible styles.
 2026-05-01 19:44:01 +02:00