aboutsummaryrefslogtreecommitdiff
path: root/.github/workflows
AgeCommit message (Collapse)AuthorFilesLines
2022-06-14fix build containerKonstantin Lebedev6-6/+6
2022-05-30Merge pull request #3116 from ↵Chris Lu1-1/+1
chrislusf/dependabot/github_actions/actions/dependency-review-action-1.0.2
2022-05-30Bump actions/setup-go from 3.1.0 to 3.2.0dependabot[bot]1-1/+1
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.1.0 to 3.2.0. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/fcdc43634adb5f7ae75a9d7a9b9361790f7293e2...b22fbbc2921299758641fab08929b4ac52b32923) --- updated-dependencies: - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-30Bump actions/dependency-review-action from 1.0.1 to 1.0.2dependabot[bot]1-1/+1
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 1.0.1 to 1.0.2. - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/39e692fa323107ef86d8fdac0067ce647f239bd7...a9c83d3af6b9031e20feba03b904645bb23d1dab) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-17build release containers for all tags and large volumeKonstantin Lebedev1-0/+58
2022-05-16Merge pull request #3063 from ↵Chris Lu1-1/+1
chrislusf/dependabot/github_actions/actions/dependency-review-action-39e692fa323107ef86d8fdac0067ce647f239bd7 Bump actions/dependency-review-action from 3f943b86c9a289f4e632c632695e2e0898d9d67d to 1
2022-05-16Bump actions/dependency-review-actiondependabot[bot]1-1/+1
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 3f943b86c9a289f4e632c632695e2e0898d9d67d to 1. This release includes the previously tagged commit. - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/3f943b86c9a289f4e632c632695e2e0898d9d67d...39e692fa323107ef86d8fdac0067ce647f239bd7) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-16Bump actions/setup-go from 3.0.0 to 3.1.0dependabot[bot]1-1/+1
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.0.0 to 3.1.0. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/f6164bd8c8acb4a71fb2791a8b6c4024ff038dab...fcdc43634adb5f7ae75a9d7a9b9361790f7293e2) --- updated-dependencies: - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-16fix buildchrislu1-2/+2
2022-05-14Merge pull request #3050 from turrisxyz/CodeQL-GitHubChris Lu1-0/+43
chore: Enable codeql action
2022-05-14build binaries for linux with all tagsKonstantin Lebedev1-0/+60
2022-05-14build release containers for all tagsKonstantin Lebedev2-1/+60
2022-05-13Update codeql.ymlNaveen1-2/+2
2022-05-13chore: Enable codeql actionnaveen1-0/+43
This action runs GitHub's industry-leading semantic code analysis engine, CodeQL, against a repository's source code to find security vulnerabilities. https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning-with-codeql https://github.com/ossf/scorecard/blob/main/docs/checks.md#sast Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-05-09Merge pull request #3028 from ↵Chris Lu5-5/+5
chrislusf/dependabot/github_actions/docker/build-push-action-3
2022-05-09Merge pull request #3027 from ↵Chris Lu5-7/+7
chrislusf/dependabot/github_actions/docker/login-action-2
2022-05-09Merge pull request #3026 from ↵Chris Lu5-5/+5
chrislusf/dependabot/github_actions/docker/metadata-action-4.0.1
2022-05-09Merge pull request #3025 from ↵Chris Lu5-5/+5
chrislusf/dependabot/github_actions/docker/setup-qemu-action-2
2022-05-09Bump docker/build-push-action from 2.10.0 to 3dependabot[bot]5-5/+5
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 2.10.0 to 3. - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/ac9327eae2b366085ac7f6a2d02df8aa8ead720a...e551b19e49efd4e98792db7592c17c09b89db8d8) --- updated-dependencies: - dependency-name: docker/build-push-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-09Bump docker/login-action from 1.14.1 to 2dependabot[bot]5-7/+7
Bumps [docker/login-action](https://github.com/docker/login-action) from 1.14.1 to 2. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/dd4fa0671be5250ee6f50aedf4cb05514abda2c7...49ed152c8eca782a232dede0303416e8f356c37b) --- updated-dependencies: - dependency-name: docker/login-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-09Bump docker/metadata-action from 3.8.0 to 4.0.1dependabot[bot]5-5/+5
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 3.8.0 to 4.0.1. - [Release notes](https://github.com/docker/metadata-action/releases) - [Upgrade guide](https://github.com/docker/metadata-action/blob/master/UPGRADE.md) - [Commits](https://github.com/docker/metadata-action/compare/b2391d37b4157fa4aa2e118d643f417910ff3242...69f6fc9d46f2f8bf0d5491e4aabe0bb8c6a4678a) --- updated-dependencies: - dependency-name: docker/metadata-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-09Bump docker/setup-qemu-action from 1.2.0 to 2dependabot[bot]5-5/+5
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 1.2.0 to 2. - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](https://github.com/docker/setup-qemu-action/compare/27d0a4f181a40b142cce983c5393082c365d1480...8b122486cedac8393e77aa9734c3528886e4a1a8) --- updated-dependencies: - dependency-name: docker/setup-qemu-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-09Bump docker/setup-buildx-action from 1.7.0 to 2dependabot[bot]5-5/+5
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 1.7.0 to 2. - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/f211e3e9ded2d9377c8cadc4489a4e38014bc4c9...dc7b9719a96d48369863986a06765841d7ea23f6) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-03build tag ydb since the growth of the binary is 5 mbKonstantin Lebedev1-2/+2
2022-05-02add back arm64 darwinchrislu2-4/+2
2022-05-02Merge pull request #3002 from ↵Chris Lu5-5/+5
chrislusf/dependabot/github_actions/docker/setup-buildx-action-1.7.0 Bump docker/setup-buildx-action from 1.6.0 to 1.7.0
2022-05-02Bump docker/setup-buildx-action from 1.6.0 to 1.7.0dependabot[bot]5-5/+5
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 1.6.0 to 1.7.0. - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/94ab11c41e45d028884a99163086648e898eed25...f211e3e9ded2d9377c8cadc4489a4e38014bc4c9) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-02Bump docker/metadata-action from 3.7.0 to 3.8.0dependabot[bot]5-5/+5
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 3.7.0 to 3.8.0. - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](https://github.com/docker/metadata-action/compare/f2a13332ac1ce8c0a71aeac48a150dbb1838ab67...b2391d37b4157fa4aa2e118d643f417910ff3242) --- updated-dependencies: - dependency-name: docker/metadata-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-04-26temporarily skip arm64 for macChris Lu1-1/+2
2022-04-24Update binaries_release2.ymlChris Lu1-1/+2
2022-04-21update go buildchrislu1-6/+2
2022-04-19chore(deps): Included dependency reviewnaveensrinivasan1-0/+14
> Dependency Review GitHub Action in your repository to enforce dependency reviews on your pull requests. > The action scans for vulnerable versions of dependencies introduced by package version changes in pull requests, > and warns you about the associated security vulnerabilities. > This gives you better visibility of what's changing in a pull request, > and helps prevent vulnerabilities being added to your repository. https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-04-06Bump docker/metadata-action from 3.6.2 to 3.7.0dependabot[bot]5-5/+5
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 3.6.2 to 3.7.0. - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](https://github.com/docker/metadata-action/compare/e5622373a38e60fb6d795a4421e56882f2d7a681...f2a13332ac1ce8c0a71aeac48a150dbb1838ab67) --- updated-dependencies: - dependency-name: docker/metadata-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-04-05Set permissions for GitHub actionsnaveensrinivasan5-0/+29
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-03-18Bump actions/setup-go from 2.2.0 to 3dependabot[bot]1-1/+1
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 2.2.0 to 3. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/bfdd3570ce990073878bf10f6b2d79082de49492...f6164bd8c8acb4a71fb2791a8b6c4024ff038dab) --- updated-dependencies: - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2022-03-18Pin actions to a full length commit SHAnaveensrinivasan11-53/+71
- Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions >Pin actions to a full length commit SHA >Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload. https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions
2022-01-19Update binaries_dev.ymlChris Lu1-1/+1
2022-01-19Update binaries_dev.ymlChris Lu1-2/+2
2021-11-23fix build issueChris Lu5-12/+12
fix https://github.com/wangyoucao577/go-release-action/issues/66
2021-11-15update to wangyoucao577/go-release-action@v1.21Chris Lu5-12/+12
2021-11-14adjust go release action versionChris Lu4-8/+8
2021-11-11releases in github actions disable http2clientChris Lu4-8/+8
2021-11-11Update binaries_dev.ymlChris Lu1-4/+4
2021-11-11Update binaries_dev.ymlChris Lu1-2/+0
2021-11-11Update binaries_dev.ymlChris Lu1-7/+4
2021-11-10Update binaries_dev.ymlChris Lu1-0/+2
2021-11-10Update binaries_dev.ymlChris Lu1-0/+3
2021-11-06trying wangyoucao577/go-release-action@bugfix/upload-failChris Lu1-4/+4
following https://github.com/wangyoucao577/go-release-action/issues/63#issuecomment-962417798
2021-10-24build latest containerChris Lu1-2/+3
2021-10-15Update binaries_dev.ymlChris Lu1-1/+1