Brandon Mitchell
3a336d35c8
Merge pull request #863 from sudo-bmitch/pr-update-20241124
...
Version bump
2024-11-24 11:05:18 -05:00
Brandon Mitchell
97d48e1cd6
Version bump
...
- ECR helper to latest commit
- anchor/syft to v1.17.0
- anchore/sbom-action to v0.17.8
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-11-24 11:01:26 -05:00
Brandon Mitchell
374f0956d0
Merge pull request #862 from sudo-bmitch/pr-image-config-artifact-err
...
Chore: Improve error message when inspecting artifacts
2024-11-22 10:35:22 -05:00
Brandon Mitchell
f5f7fe6d2c
Chore: Improve error message when inspecting artifacts
...
Artifacts can have their configuration retrieved with "regctl artifact get --config".
This also improves test coverage.
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-11-22 10:31:34 -05:00
Brandon Mitchell
5fbf76c4f6
Merge pull request #859 from sudo-bmitch/pr-update-20241117
...
Version bump
2024-11-17 09:18:19 -05:00
Brandon Mitchell
8ec4fc74b8
Version bump
...
- Alpine image digest
- Go image digest
- ECR helper commit
- softprops/action-gh-release to v2.1.0
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-11-17 09:14:18 -05:00
Brandon Mitchell
2ed50db9b8
Merge pull request #856 from sudo-bmitch/pr-ref-path-allow-plus
...
Feat: Allow plus in ocidir path
2024-11-15 15:21:25 -05:00
Brandon Mitchell
f607b3db32
Feat: Allow plus in ocidir path
...
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-11-15 15:15:38 -05:00
Brandon Mitchell
118a7c9acd
Merge pull request #854 from sudo-bmitch/pr-release-notes
...
Fix: Inject release notes by file
2024-11-12 11:08:01 -05:00
Brandon Mitchell
e6f2ecc2d8
Fix: Inject release notes by file
...
The previous body string was broken in an update, no longer interpreting the encoded linefeeds.
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-11-12 11:04:06 -05:00
Brandon Mitchell
ddf7251f49
Merge pull request #853 from sudo-bmitch/pr-wasm
...
Feat: Move logrus calls into files excluded by wasm
2024-11-12 10:25:27 -05:00
Brandon Mitchell
289533b02c
Feat: Move logrus calls into files excluded by wasm
...
This permits builds of wasm binaries.
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-11-12 10:18:47 -05:00
Brandon Mitchell
3a4d032d53
Merge pull request #852 from sudo-bmitch/pr-legacy
...
Breaking: Disable legacy packages by default
2024-11-12 09:35:55 -05:00
Brandon Mitchell
37fcba1d7a
Breaking: Disable legacy packages by default.
...
Legacy packages may still be used with "-tags legacy" added to the build.
They may be permanently removed in a future release.
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-11-12 09:23:58 -05:00
Brandon Mitchell
9671c2847e
Merge pull request #851 from sudo-bmitch/pr-slog-regsync
...
Feat: Switch regsync to slog
2024-11-11 16:57:25 -05:00
Brandon Mitchell
02aefed48a
Switch regsync to slog
...
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-11-11 16:41:33 -05:00
Brandon Mitchell
0b85885256
Merge pull request #850 from sudo-bmitch/pr-slog-regctl
...
Feat: Switch regctl to slog
2024-11-11 15:12:21 -05:00
Brandon Mitchell
4b3b8c1e5b
Feat: Switch regctl to slog
...
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-11-11 14:57:30 -05:00
Brandon Mitchell
6aa7b24c59
Merge pull request #849 from sudo-bmitch/pr-slog-regbot
...
Feat: Switch regbot to slog
2024-11-11 13:35:19 -05:00
Brandon Mitchell
3756788d13
Feat: Switch regbot to slog
...
This also consolidated the trace logging level to a single definition.
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-11-11 13:24:54 -05:00
Brandon Mitchell
6aa3ff18d9
Merge pull request #848 from sudo-bmitch/pr-update-20241111
...
Version bump
2024-11-11 10:06:06 -05:00
Brandon Mitchell
f3b0ff3966
Version bump
...
- Go to 1.23.3
- ECR Helper to latest commit
- GCR helper to v2.1.26
- anchore/syft to v1.16.0
- anchore/sbom-action to v0.17.7
- davidanson/markdownlint-cli2 to v0.15.0
- golang.org/x/sys to v0.27.0
- golang.org/x/term to v0.26.0
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-11-11 10:01:50 -05:00
Brandon Mitchell
81644e3040
Merge pull request #847 from sudo-bmitch/pr-slog
...
Feat: Refactor logging to use log/slog
2024-11-11 09:54:26 -05:00
Brandon Mitchell
1eb1ea4b34
Feat: Refactor logging to use log/slog
...
This updates the regclient Go library.
Existing users of logrus will continue to work using a logrus handler to slog.
Updates to the various commands will be made in a future commit.
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-11-10 17:14:57 -05:00
Brandon Mitchell
e0c84eb1b4
Merge pull request #846 from sudo-bmitch/pr-mod-dedup-warning
...
Fix: Dedup warnings on image mod
2024-11-04 08:58:25 -05:00
Brandon Mitchell
928df38e92
Fix: Dedup warnings on image mod
...
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-11-04 08:51:24 -05:00
Brandon Mitchell
952240ad51
Merge pull request #845 from sudo-bmitch/pr-update-20241103
...
Version bump
2024-11-03 15:22:12 -05:00
Brandon Mitchell
afac44671d
Version bump
...
- ECR helper to latest commit
- anchore/syft to v1.15.0
- anchore/sbom-aciton to v0.17.6
- softprops/action-gh-release to v2.0.9
- google/osv-scanner to v1.9.1
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-11-03 15:18:45 -05:00
Brandon Mitchell
4824016885
Merge pull request #843 from sudo-bmitch/pr-pqueue-race
...
Fix: Race condition in the pqueue tests
2024-10-27 16:38:38 -04:00
Brandon Mitchell
cedbd76adc
Fix: Race condition in the pqueue tests
...
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-10-27 16:33:51 -04:00
Brandon Mitchell
6b1cec85f2
Merge pull request #842 from sudo-bmitch/pr-update-20241027
...
Version bump
2024-10-27 16:33:42 -04:00
Brandon Mitchell
8c600f3062
Version bump
...
- ECR Helper to latest commit
- anchore/syft to v1.14.2
- actions/checkout to v4.2.2
- actions/setup-go to v5.1.0
- anchore/sbom-action to v0.17.5
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-10-27 16:07:32 -04:00
Brandon Mitchell
e5fdd53a8b
Merge pull request #841 from sudo-bmitch/pr-oci-image-warn-syft-missing
...
Fix: Add a warning if syft is not installed
2024-10-21 11:54:19 -04:00
Brandon Mitchell
2b6e0181cf
Fix: Add a warning if syft is not installed
...
Syft isn't needed for the reproducible digest, but nice to have.
This only outputs a warning rather than forcing an install.
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-10-21 11:51:08 -04:00
Brandon Mitchell
c02b0c030f
Merge pull request #840 from sudo-bmitch/pr-update-20241020
...
Version bump
2024-10-20 10:52:15 -04:00
Brandon Mitchell
6b3d2b7496
Version bump
...
- anchore/syft to v1.14.1
- anchore/sbom-action to v0.17.4
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-10-20 10:43:07 -04:00
Brandon Mitchell
741aed0994
Merge pull request #839 from sudo-bmitch/pr-update-20241013
...
Version bump
2024-10-13 11:18:04 -04:00
Brandon Mitchell
d6fe3eb800
Version bump
...
- actions checkout to v4.2.1
- actions/upload-artifact to v4.4.3
- anchore/sbom-action to v17.3
- anchore/syft to v1.14.0- ECR helper to latest commit
- klauspost/compress to v1.17.11
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-10-13 11:14:16 -04:00
Brandon Mitchell
1132d8b7f9
Merge pull request #837 from sudo-bmitch/pr-docker-release-base
...
Chore: Update docker image base filesystem
2024-10-09 15:11:48 -04:00
Brandon Mitchell
be776c7238
Chore: Update docker image base filesystem
...
This creates the base filesystem with a multi-stage build instead of the embedded tgz file.
This removes a binary file from the project, consolidates to a single layer, and fixes the permissions on the /home directory.
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-10-09 15:07:46 -04:00
Brandon Mitchell
87ac18eeef
Merge pull request #834 from sudo-bmitch/pr-update-20241007
...
Version bump
2024-10-07 12:28:49 -04:00
Brandon Mitchell
969a326e7a
Version bump
...
- ECR Helper to latest commit
- Go to 1.23.2
- sigstore/cosign to v2.4.1
- actions/upload-artifact to v4.4.1
- docker/setup-buildx-action to v3.7.1
- sigstore/cosign-installer to v3.7.0
- google/osv-scanner to v1.9.0
- klauspost/compress to v1.17.0
- golang.org/x/sys to v0.26.0
- golang.org/x/term to v0.25.0
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-10-07 12:20:37 -04:00
Brandon Mitchell
4ee3dce7d6
Merge pull request #832 from sudo-bmitch/pr-remove-scorecard
...
Chore: Remove OpenSSF scorecard and best practices
2024-10-05 12:01:42 -04:00
Brandon Mitchell
4add3bc9b6
Chore: Remove OpenSSF scorecard and best practices
...
Scorecard is generating false alerts for things the upstream project will not fix.
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-10-05 11:49:19 -04:00
Brandon Mitchell
b7137c27be
Merge pull request #831 from sudo-bmitch/pr-gh-issue-assignment
...
Chore: Do not automatically assign myself to GitHub issues
2024-10-05 11:47:19 -04:00
Brandon Mitchell
b6365f14b4
Chore: Do not automatically assign myself
...
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-10-05 11:42:22 -04:00
Brandon Mitchell
d4aa74ea2d
Merge pull request #830 from sudo-bmitch/pr-int-conversion-overflow
...
Fix: Detect integer overflows on type conversion
2024-10-04 16:48:11 -04:00
Brandon Mitchell
f09f252c6f
Fix: Detect integer overflows on type conversion
...
This removes a few gosec overrides.
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-10-04 16:42:40 -04:00
Brandon Mitchell
396a4522da
Merge pull request #829 from sudo-bmitch/pr-update-20240930
...
Version bump
2024-09-30 10:06:35 -04:00
Brandon Mitchell
f5d94fee2b
Version bump
...
- Update config to use yaml anchors and aliases
- docker/build-push-action to v6.9.0
- github/codeql-action to v3.26.10
Signed-off-by: Brandon Mitchell <git@bmitch.net>
2024-09-30 09:56:54 -04:00
