Skip to content

Update Go version and enable pushing to ghcr.io in CI#60

Merged
turkenf merged 1 commit intocrossplane-contrib:mainfrom
turkenf:publish-ghcr
Feb 24, 2025
Merged

Update Go version and enable pushing to ghcr.io in CI#60
turkenf merged 1 commit intocrossplane-contrib:mainfrom
turkenf:publish-ghcr

Conversation

@turkenf
Copy link
Copy Markdown
Collaborator

@turkenf turkenf commented Feb 24, 2025

Description of your changes

This PR updates go version to fix the following CVEs and enable pushing to ghcr.io in CI.

NAME    INSTALLED  FIXED-IN    TYPE       VULNERABILITY   SEVERITY
stdlib  go1.23.1   1.23.6      go-module  CVE-2025-22866  Medium
stdlib  go1.23.1   1.23.5      go-module  CVE-2024-45341  Medium
stdlib  go1.23.1   1.23.5      go-module  CVE-2024-45336  Medium

Also updated deprecated actions:

  • actions/upload-artifact => v3 to v4
  • actions/download-artifact => v3 to v4

I have:

@turkenf turkenf force-pushed the publish-ghcr branch 2 times, most recently from 2b21822 to 7d2baef Compare February 24, 2025 14:40
Signed-off-by: Fatih Türken <turkenf@gmail.com>
Copy link
Copy Markdown
Collaborator

@sergenyalcin sergenyalcin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @turkenf LGTM!

@turkenf turkenf merged commit 3ffa7c0 into crossplane-contrib:main Feb 24, 2025
6 checks passed
@turkenf turkenf deleted the publish-ghcr branch February 24, 2025 15:06
with:
registry: ghcr.io
username: ${{ github.repository_owner }}
password: ${{ secrets.GITHUB_TOKEN }}
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i don't have permissions to see the github actions settings, but I assume the default token has been granted package write permissions?

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@turkenf turkenf changed the title Update Go version and enable pushing to ghcr.io in CI [release-0.4] Update Go version and enable pushing to ghcr.io in CI Feb 24, 2025
@turkenf turkenf changed the title [release-0.4] Update Go version and enable pushing to ghcr.io in CI Update Go version and enable pushing to ghcr.io in CI Feb 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants