mirror of
https://github.com/regclient/regclient.git
synced 2025-04-18 22:44:00 +03:00
Version bump
- actions/setup-go to v5.4.0 - actions/upload-artifact to v4.6.2 - anchore/syft to v1.21.0 Signed-off-by: Brandon Mitchell <git@bmitch.net>
This commit is contained in:
Brandon Mitchell
parent
ffb12efa6f
commit
7c47f8acde
2
.github/workflows/ci-registry.yml
vendored
2
.github/workflows/ci-registry.yml
vendored
@ -26,7 +26,7 @@ jobs:
|
||||
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
||||
|
||||
- name: "Set up Go ${{ env.RELEASE_GO_VER }}"
|
||||
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
|
||||
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
|
||||
with:
|
||||
go-version: "${{ env.RELEASE_GO_VER }}"
|
||||
check-latest: true
|
||||
|
||||
2
.github/workflows/docker.yml
vendored
2
.github/workflows/docker.yml
vendored
@ -128,7 +128,7 @@ jobs:
|
||||
uses: anchore/sbom-action/download-syft@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
|
||||
id: syft
|
||||
with:
|
||||
syft-version: "v1.20.0"
|
||||
syft-version: "v1.21.0"
|
||||
|
||||
# Dogfooding, use regctl to modify regclient images to improve reproducibility
|
||||
- name: Install regctl
|
||||
|
||||
6
.github/workflows/go.yml
vendored
6
.github/workflows/go.yml
vendored
@ -35,7 +35,7 @@ jobs:
|
||||
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
||||
|
||||
- name: "Set up Go ${{ matrix.gover }}"
|
||||
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
|
||||
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
|
||||
with:
|
||||
go-version: "${{ matrix.gover }}"
|
||||
check-latest: true
|
||||
@ -63,7 +63,7 @@ jobs:
|
||||
uses: anchore/sbom-action/download-syft@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
|
||||
id: syft
|
||||
with:
|
||||
syft-version: "v1.20.0"
|
||||
syft-version: "v1.21.0"
|
||||
|
||||
- name: Build artifacts
|
||||
if: startsWith( github.ref, 'refs/tags/v' ) || github.ref == 'refs/heads/main'
|
||||
@ -155,7 +155,7 @@ jobs:
|
||||
|
||||
- name: Save artifacts
|
||||
if: github.ref == 'refs/heads/main' && matrix.gover == env.RELEASE_GO_VER
|
||||
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
|
||||
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
|
||||
with:
|
||||
name: binaries
|
||||
path: ./artifacts/
|
||||
|
||||
2
.github/workflows/vulnscans.yml
vendored
2
.github/workflows/vulnscans.yml
vendored
@ -20,7 +20,7 @@ jobs:
|
||||
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
||||
|
||||
- name: "Set up Go"
|
||||
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
|
||||
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
|
||||
with:
|
||||
go-version: "${{ env.RELEASE_GO_VER }}"
|
||||
check-latest: true
|
||||
|
||||
@ -12,11 +12,11 @@
|
||||
{"name":"gha-cosign-version","key":"https://github.com/sigstore/cosign.git","version":"v2.4.3"}
|
||||
{"name":"gha-golang-matrix","key":"golang-matrix","version":"[\"1.22\", \"1.23\", \"1.24\"]"}
|
||||
{"name":"gha-golang-release","key":"golang-latest","version":"1.24"}
|
||||
{"name":"gha-syft-version","key":"docker.io/anchore/syft","version":"v1.20.0"}
|
||||
{"name":"gha-syft-version","key":"docker.io/anchore/syft","version":"v1.21.0"}
|
||||
{"name":"gha-uses-commit","key":"https://github.com/actions/checkout.git:v4.2.2","version":"11bd71901bbe5b1630ceea73d27597364c9af683"}
|
||||
{"name":"gha-uses-commit","key":"https://github.com/actions/setup-go.git:v5.3.0","version":"f111f3307d8850f501ac008e886eec1fd1932a34"}
|
||||
{"name":"gha-uses-commit","key":"https://github.com/actions/setup-go.git:v5.4.0","version":"0aaccfd150d50ccaeb58ebd88d36e91967a5f35b"}
|
||||
{"name":"gha-uses-commit","key":"https://github.com/actions/stale.git:v9.1.0","version":"5bef64f19d7facfb25b37b414482c7164d639639"}
|
||||
{"name":"gha-uses-commit","key":"https://github.com/actions/upload-artifact.git:v4.6.1","version":"4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1"}
|
||||
{"name":"gha-uses-commit","key":"https://github.com/actions/upload-artifact.git:v4.6.2","version":"ea165f8d65b6e75b540449e92b4886f43607fa02"}
|
||||
{"name":"gha-uses-commit","key":"https://github.com/anchore/sbom-action.git:v0.18.0","version":"f325610c9f50a54015d37c8d16cb3b0e2c8f4de0"}
|
||||
{"name":"gha-uses-commit","key":"https://github.com/docker/build-push-action.git:v6.15.0","version":"471d1dc4e07e5cdedd4c2171150001c434f0b7a4"}
|
||||
{"name":"gha-uses-commit","key":"https://github.com/docker/login-action.git:v3.4.0","version":"74a5d142397b4f367a81961eba4e8cd7edddf772"}
|
||||
@ -25,9 +25,9 @@
|
||||
{"name":"gha-uses-commit","key":"https://github.com/sigstore/cosign-installer.git:v3.8.1","version":"d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a"}
|
||||
{"name":"gha-uses-commit","key":"https://github.com/softprops/action-gh-release.git:v2.2.1","version":"c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda"}
|
||||
{"name":"gha-uses-semver","key":"https://github.com/actions/checkout.git","version":"v4.2.2"}
|
||||
{"name":"gha-uses-semver","key":"https://github.com/actions/setup-go.git","version":"v5.3.0"}
|
||||
{"name":"gha-uses-semver","key":"https://github.com/actions/setup-go.git","version":"v5.4.0"}
|
||||
{"name":"gha-uses-semver","key":"https://github.com/actions/stale.git","version":"v9.1.0"}
|
||||
{"name":"gha-uses-semver","key":"https://github.com/actions/upload-artifact.git","version":"v4.6.1"}
|
||||
{"name":"gha-uses-semver","key":"https://github.com/actions/upload-artifact.git","version":"v4.6.2"}
|
||||
{"name":"gha-uses-semver","key":"https://github.com/anchore/sbom-action.git","version":"v0.18.0"}
|
||||
{"name":"gha-uses-semver","key":"https://github.com/docker/build-push-action.git","version":"v6.15.0"}
|
||||
{"name":"gha-uses-semver","key":"https://github.com/docker/login-action.git","version":"v3.4.0"}
|
||||
@ -43,9 +43,9 @@
|
||||
{"name":"makefile-markdown-lint","key":"docker.io/davidanson/markdownlint-cli2","version":"v0.17.2"}
|
||||
{"name":"makefile-osv-scanner","key":"https://github.com/google/osv-scanner.git","version":"v2.0.0"}
|
||||
{"name":"makefile-staticcheck","key":"https://github.com/dominikh/go-tools.git","version":"v0.6.1"}
|
||||
{"name":"makefile-syft-container-digest","key":"anchore/syft:v1.20.0","version":"sha256:b46e597614ddc78621e560af3fabf9346e35462ea1c886a38b30bcc7ca601a73"}
|
||||
{"name":"makefile-syft-container-tag","key":"anchore/syft","version":"v1.20.0"}
|
||||
{"name":"makefile-syft-version","key":"docker.io/anchore/syft","version":"v1.20.0"}
|
||||
{"name":"makefile-syft-container-digest","key":"anchore/syft:v1.21.0","version":"sha256:eaf0517f7dcd9a29915eabb2c007dbc65b2f3f31f6e17906717e506d1d37a1c0"}
|
||||
{"name":"makefile-syft-container-tag","key":"anchore/syft","version":"v1.21.0"}
|
||||
{"name":"makefile-syft-version","key":"docker.io/anchore/syft","version":"v1.21.0"}
|
||||
{"name":"osv-golang-release","key":"docker.io/library/golang","version":"1.24.1"}
|
||||
{"name":"shell-alpine-digest","key":"docker.io/library/alpine:3.21.3","version":"sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c"}
|
||||
{"name":"shell-alpine-tag-base","key":"docker.io/library/alpine","version":"3"}
|
||||
|
||||
4
Makefile
4
Makefile
@ -40,8 +40,8 @@ GO_VULNCHECK_VER?=v1.1.4
|
||||
OSV_SCANNER_VER?=v2.0.0
|
||||
SYFT?=$(shell command -v syft 2>/dev/null)
|
||||
SYFT_CMD_VER:=$(shell [ -x "$(SYFT)" ] && echo "v$$($(SYFT) version | awk '/^Version: / {print $$2}')" || echo "0")
|
||||
SYFT_VERSION?=v1.20.0
|
||||
SYFT_CONTAINER?=anchore/syft:v1.20.0@sha256:b46e597614ddc78621e560af3fabf9346e35462ea1c886a38b30bcc7ca601a73
|
||||
SYFT_VERSION?=v1.21.0
|
||||
SYFT_CONTAINER?=anchore/syft:v1.21.0@sha256:eaf0517f7dcd9a29915eabb2c007dbc65b2f3f31f6e17906717e506d1d37a1c0
|
||||
ifneq "$(SYFT_CMD_VER)" "$(SYFT_VERSION)"
|
||||
SYFT=docker run --rm \
|
||||
-v "$(shell pwd)/:$(shell pwd)/" -w "$(shell pwd)" \
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user