19 Commits

Author	SHA1	Message	Date
Brandon Mitchell	f5d94fee2b	Version bump ... - Update config to use yaml anchors and aliases - docker/build-push-action to v6.9.0 - github/codeql-action to v3.26.10 Signed-off-by: Brandon Mitchell <git@bmitch.net>	2024-09-30 09:56:54 -04:00
Brandon Mitchell	72788f7045	Version bump ... - Update version-bump config for processors - gomajor to v0.14.0 - gosec to v2.21.4 - syft to v1.13.0 - actions/checkout to v4.2.0 - docker/build-push-action to v6.8.0 - github/codeql-action to v3.26.9 Signed-off-by: Brandon Mitchell <git@bmitch.net>	2024-09-29 21:08:01 -04:00
Brandon Mitchell	1645a993f0	Override Go versions for OSV Scanner and disable ... Disabled pending the next release that uses the override file. Signed-off-by: Brandon Mitchell <git@bmitch.net>	2024-03-25 11:19:34 -04:00
Brandon Mitchell	5b4dc75045	Update Zot version for CI tests ... This also removes some RC settings, updates the distribution/distribution version, manages the versions with version-bump, and speeds up the tests. Signed-off-by: Brandon Mitchell <git@bmitch.net>	2024-03-06 16:06:05 -05:00
Brandon Mitchell	507f9b863a	Version bump ... - Adding pins for base image annotation - codeql-action to v3.24.5 - staticcheck to v0.4.7 - olareg to latest commit Signed-off-by: Brandon Mitchell <git@bmitch.net>	2024-02-26 10:57:29 -05:00
Brandon Mitchell	11309fe673	Change go.mod version to oldest supported release ... This project supports the last 3 major Go versions. Go itself only supports the last 2 major releases. Signed-off-by: Brandon Mitchell <git@bmitch.net>	2023-12-07 10:14:17 -05:00
Brandon Mitchell	d1bfa31baf	Pinning dependencies ... - GHA workflows to commits - Docker tags include full semver Signed-off-by: Brandon Mitchell <git@bmitch.net>	2023-11-18 16:07:24 -05:00
Brandon Mitchell	593598fb81	Add gomajor to check for major version updates ... Signed-off-by: Brandon Mitchell <git@bmitch.net>	2023-11-16 17:00:41 -05:00
Brandon Mitchell	b933caa59d	Add gosec security linter ... Most of this is error handling. Many of the file IO warnings are intentionally ignored since these tools are designed to run locally. Signed-off-by: Brandon Mitchell <git@bmitch.net>	2023-09-25 21:44:24 -04:00
Brandon Mitchell	1dbc4e8252	Add OSV scanner ... Signed-off-by: Brandon Mitchell <git@bmitch.net>	2023-07-16 10:01:10 -04:00
Brandon Mitchell	19976c96f1	Switch markdownlint CLI tool ... Signed-off-by: Brandon Mitchell <git@bmitch.net>	2023-06-29 19:00:46 -04:00
Brandon Mitchell	ac832aace9	Pin GCR helper to a tag ... GCR doesn't build correctly against the master branch. Signed-off-by: Brandon Mitchell <git@bmitch.net>	2023-06-01 16:25:09 -04:00
Brandon Mitchell	35112b48c5	Add version-bump checks and GHA ... - Check Go version in go.mod. - Add a GHA to check versions weekly. - Bump versions. Signed-off-by: Brandon Mitchell <git@bmitch.net>	2023-05-26 21:01:35 -04:00
Brandon Mitchell	4bb51910e4	Pinning markdown lint version ... Signed-off-by: Brandon Mitchell <git@bmitch.net>	2023-05-09 14:44:15 -04:00
Brandon Mitchell	6ad5a5b61f	Pin version of cosign GHA ... Signed-off-by: Brandon Mitchell <git@bmitch.net>	2023-02-25 10:41:44 -05:00
Brandon Mitchell	292a9bd19b	Add keyless signing for binary artifacts ... Signed-off-by: Brandon Mitchell <git@bmitch.net>	2023-02-19 11:52:32 -05:00
Brandon Mitchell	125f9924ae	Pin version of staticcheck and syft ... Signed-off-by: Brandon Mitchell <git@bmitch.net>	2023-02-18 09:25:53 -05:00
Brandon Mitchell	805b69ff17	Update version bump for filter syntax ... Signed-off-by: Brandon Mitchell <git@bmitch.net>	2023-01-09 19:57:03 -05:00
Brandon Mitchell	95ed3d488e	Add version-bump utility and pin dependencies ... Signed-off-by: Brandon Mitchell <git@bmitch.net>	2022-12-25 18:48:32 -05:00