From d77a0cfe6dcfd7c280f1ffc7751837ffd1d49306 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 14 May 2025 10:28:57 -0700 Subject: [PATCH 01/20] Bump dawidd6/action-download-artifact from 7 to 9 (#1234) Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) from 7 to 9. - [Release notes](https://github.com/dawidd6/action-download-artifact/releases) - [Commits](https://github.com/dawidd6/action-download-artifact/compare/v7...v9) --- updated-dependencies: - dependency-name: dawidd6/action-download-artifact dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/test-report.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/test-report.yaml b/.github/workflows/test-report.yaml index b9cf5fc73..3c9db3033 100644 --- a/.github/workflows/test-report.yaml +++ b/.github/workflows/test-report.yaml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Download and Extract Artifacts - uses: dawidd6/action-download-artifact@v7 + uses: dawidd6/action-download-artifact@v9 with: run_id: ${{ github.event.workflow_run.id }} path: artifacts From ad1080d2bad80654360ff102f4b08e65029a83b5 Mon Sep 17 00:00:00 2001 From: Ivan Milchev Date: Thu, 5 Jun 2025 13:18:32 +0300 Subject: [PATCH 02/20] =?UTF-8?q?=F0=9F=A7=B9=20fix=20integration=20tests?= =?UTF-8?q?=20(#1246)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Ivan Milchev --- .github/env | 2 +- go.mod | 12 +++++----- go.sum | 15 +++++++------ tests/framework/nexus/assets/assets.go | 28 +++++++++++------------- tests/framework/nexus/k8s/integration.go | 2 +- tests/framework/utils/k8s_helper.go | 9 ++++++++ 6 files changed, 38 insertions(+), 30 deletions(-) diff --git a/.github/env b/.github/env index dce937c01..52176d588 100644 --- a/.github/env +++ b/.github/env @@ -1,4 +1,4 @@ -golang-version=1.23.1 +golang-version=1.24.3 operator-sdk-version=v1.33.0 MONDOO_ORG_MRN=//captain.api.mondoo.app/organizations/mondoo-operator-testing MONDOO_GQL_ENDPOINT=https://api.mondoo.com/query diff --git a/go.mod b/go.mod index 9b5c88c9b..6ac23a9dd 100644 --- a/go.mod +++ b/go.mod @@ -1,8 +1,8 @@ module go.mondoo.com/mondoo-operator -go 1.22.0 +go 1.24 -toolchain go1.22.4 +toolchain go1.24.3 replace go.mondoo.com/cnquery/v11/providers/k8s => github.com/mondoohq/cnquery/providers/k8s v0.0.0-20240730122727-3ad8a202a925 @@ -23,11 +23,11 @@ require ( github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.74.0 github.com/rs/zerolog v1.33.0 github.com/spf13/cobra v1.8.1 - github.com/stretchr/testify v1.9.0 + github.com/stretchr/testify v1.10.0 go.mondoo.com/cnquery/v11 v11.15.0 go.mondoo.com/cnquery/v11/providers/k8s v0.0.0-00010101000000-000000000000 go.mondoo.com/cnspec/v11 v11.15.0 - go.mondoo.com/mondoo-go v0.0.0-20240716062427-ec95d879cbe7 + go.mondoo.com/mondoo-go v0.0.0-20250604000435-11732353461f // pin v0.28.9 k8s.io/api v0.29.5 // pin v0.28.9 @@ -114,7 +114,7 @@ require ( github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect github.com/go-git/go-billy/v5 v5.5.0 // indirect github.com/go-git/go-git/v5 v5.12.0 // indirect - github.com/go-jose/go-jose/v3 v3.0.3 // indirect + github.com/go-jose/go-jose/v3 v3.0.4 // indirect github.com/go-jose/go-jose/v4 v4.0.4 // indirect github.com/go-logr/stdr v1.2.2 // indirect github.com/go-openapi/jsonpointer v0.21.0 // indirect @@ -259,7 +259,7 @@ require ( go.uber.org/zap v1.27.0 golang.org/x/crypto v0.25.0 // indirect golang.org/x/net v0.27.0 // indirect - golang.org/x/oauth2 v0.21.0 // indirect + golang.org/x/oauth2 v0.30.0 // indirect golang.org/x/sys v0.22.0 // indirect golang.org/x/term v0.22.0 // indirect golang.org/x/text v0.16.0 // indirect diff --git a/go.sum b/go.sum index 21371f9ed..e4fd6e09e 100644 --- a/go.sum +++ b/go.sum @@ -348,8 +348,8 @@ github.com/go-git/go-git/v5 v5.12.0/go.mod h1:FTM9VKtnI2m65hNI/TenDDDnUf2Q9FHnXY github.com/go-gl/glfw v0.0.0-20190409004039-e6da0acd62b1/go.mod h1:vR7hzQXu2zJy9AVAgeJqvqgH9Q5CA+iKCZ2gyEVpxRU= github.com/go-gl/glfw/v3.3/glfw v0.0.0-20191125211704-12ad95a8df72/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8= github.com/go-gl/glfw/v3.3/glfw v0.0.0-20200222043503-6f7a984d4dc4/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8= -github.com/go-jose/go-jose/v3 v3.0.3 h1:fFKWeig/irsp7XD2zBxvnmA/XaRWp5V3CBsZXJF7G7k= -github.com/go-jose/go-jose/v3 v3.0.3/go.mod h1:5b+7YgP7ZICgJDBdfjZaIt+H/9L9T/YQrVfLAMboGkQ= +github.com/go-jose/go-jose/v3 v3.0.4 h1:Wp5HA7bLQcKnf6YYao/4kpRpVMp/yf6+pJKV8WFSaNY= +github.com/go-jose/go-jose/v3 v3.0.4/go.mod h1:5b+7YgP7ZICgJDBdfjZaIt+H/9L9T/YQrVfLAMboGkQ= github.com/go-jose/go-jose/v4 v4.0.4 h1:VsjPI33J0SB9vQM6PLmNjoHqMQNGPiZ0rHL7Ni7Q6/E= github.com/go-jose/go-jose/v4 v4.0.4/go.mod h1:NKb5HO1EZccyMpiZNbdUw/14tiXNyUJh188dfnMCAfc= github.com/go-kit/kit v0.8.0/go.mod h1:xBxKIO96dXMWWy0MnWVtmwkA9/13aqxPnvrjFYMA2as= @@ -865,8 +865,9 @@ github.com/stretchr/testify v1.7.2/go.mod h1:R6va5+xMeoiuVRoj+gSkQ7d3FALtqAAGI1F github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU= github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4= github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo= -github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg= github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= +github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA= +github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= github.com/subosito/gotenv v1.2.0/go.mod h1:N0PQaV/YGNqwC0u51sEeR/aUtSLEXKX9iv69rRypqCw= github.com/subosito/gotenv v1.6.0 h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8= github.com/subosito/gotenv v1.6.0/go.mod h1:Dk4QP5c2W3ibzajGcXpNraDfq2IrhjMIvMSWPKKo0FU= @@ -904,8 +905,8 @@ go.mondoo.com/cnquery/v11 v11.15.0 h1:CFbb5PNy2+Ldxbep/ge3A1bpWdbneZwYrKBS6odFPk go.mondoo.com/cnquery/v11 v11.15.0/go.mod h1:ZtFx4/48GzOObnhjb/vydx/3r8NRfj9teyXmDpMLUbA= go.mondoo.com/cnspec/v11 v11.15.0 h1:LFmpsG8zvMAVWXdPdMvn2X4NB7QdcPZmBU/iu8OwE38= go.mondoo.com/cnspec/v11 v11.15.0/go.mod h1:MgCWdwB4eZJETxxE9ssjZpL2IqRWiPMh8rD/YkY197U= -go.mondoo.com/mondoo-go v0.0.0-20240716062427-ec95d879cbe7 h1:nsTJvZNM+4VNgzsua3IZ2FeDqiQXT7MvaN5ifoy08Uw= -go.mondoo.com/mondoo-go v0.0.0-20240716062427-ec95d879cbe7/go.mod h1:4032UBD0ph9LyhXq5OQmmxkJv37HdAGi34YLWbhnMDA= +go.mondoo.com/mondoo-go v0.0.0-20250604000435-11732353461f h1:v7IXkZbMqUrDPrzfv4ZLmLL4Sb+UJSJ4+opPcHOYW6I= +go.mondoo.com/mondoo-go v0.0.0-20250604000435-11732353461f/go.mod h1:Ih8FsSC1VhLk7F3hS7Ji6nleAi29VMqRb7f555jr6SE= go.mondoo.com/ranger-rpc v0.6.2 h1:HgPprXOblvF3dOWLTz5si+uKnUyJhuOGH9yr96RDDyc= go.mondoo.com/ranger-rpc v0.6.2/go.mod h1:4XpBMe2HeSAT1IzqeGZ/ueTfY92Eg3BAHijsls+6qSU= go.opencensus.io v0.21.0/go.mod h1:mSImk1erAIZhrmZN+AvHh14ztQfjbGwt4TtuofqLduU= @@ -1066,8 +1067,8 @@ golang.org/x/oauth2 v0.0.0-20210805134026-6f1e6394065a/go.mod h1:KelEdhl1UZF7XfJ golang.org/x/oauth2 v0.0.0-20210819190943-2bc19b11175f/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A= golang.org/x/oauth2 v0.0.0-20211005180243-6b3c2da341f1/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A= golang.org/x/oauth2 v0.0.0-20211104180415-d3ed0bb246c8/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A= -golang.org/x/oauth2 v0.21.0 h1:tsimM75w1tF/uws5rbeHzIWxEqElMehnc+iW793zsZs= -golang.org/x/oauth2 v0.21.0/go.mod h1:XYTD2NtWslqkgxebSiOHnXEap4TF09sJSc7H1sXbhtI= +golang.org/x/oauth2 v0.30.0 h1:dnDm7JmhM45NNpd8FDDeLhK6FwqbOf4MLCM9zb1BOHI= +golang.org/x/oauth2 v0.30.0/go.mod h1:B++QgG3ZKulg6sRPGD/mqlHQs5rB3Ml9erfeDY7xKlU= golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= diff --git a/tests/framework/nexus/assets/assets.go b/tests/framework/nexus/assets/assets.go index 1b7f2c552..0faaf300d 100644 --- a/tests/framework/nexus/assets/assets.go +++ b/tests/framework/nexus/assets/assets.go @@ -60,27 +60,25 @@ func ListAssetsWithScores( return nil, err } - var assetReportQ struct { - AssetReport struct { - AssetReport struct { - ListPolicies struct { - Edges []struct { - Node struct { - Mrn string - Score struct { - Grade string - } + var assetQ struct { + Asset struct { + ListPolicies struct { + Edges []struct { + Node struct { + Mrn string + Score struct { + Grade string } } - } `graphql:"listPolicies"` - } `graphql:"... on AssetReport"` - } `graphql:"assetReport(input: $input)"` + } + } `graphql:"listPolicies"` + } `graphql:"asset(mrn: $mrn)"` } assetScores := make([]AssetWithScore, len(q.AssetsConnection.Edges)) for i := range q.AssetsConnection.Edges { a := q.AssetsConnection.Edges[i].Node - err := gqlClient.Query(ctx, &assetReportQ, map[string]interface{}{"input": mondoogql.AssetReportInput{AssetMrn: a.Mrn}}) + err := gqlClient.Query(ctx, &assetQ, map[string]interface{}{"mrn": mondoogql.String(a.Mrn)}) if err != nil { return nil, err } @@ -97,7 +95,7 @@ func ListAssetsWithScores( assetScores[i].Labels[l.Key] = l.Value } - for _, p := range assetReportQ.AssetReport.AssetReport.ListPolicies.Edges { + for _, p := range assetQ.Asset.ListPolicies.Edges { assetScores[i].PolicyScores = append(assetScores[i].PolicyScores, PolicyScore{ Mrn: p.Node.Mrn, Grade: p.Node.Score.Grade, diff --git a/tests/framework/nexus/k8s/integration.go b/tests/framework/nexus/k8s/integration.go index 7fc6c17dd..d431775a6 100644 --- a/tests/framework/nexus/k8s/integration.go +++ b/tests/framework/nexus/k8s/integration.go @@ -203,7 +203,7 @@ func (p *CiCdProject) ListAssets(ctx context.Context) ([]CiCdJob, error) { } `graphql:"cicdProjectJobs(input: $input)"` } err := p.gqlClient.Query(ctx, &q, map[string]interface{}{ - "input": mondoogql.CicdProjectJobsInput{SpaceMrn: p.spaceMrn, ProjectID: p.id}, + "input": mondoogql.CicdProjectJobsInput{SpaceMrn: p.spaceMrn, ProjectId: p.id}, "first": mondoogql.Int(100), }) if err != nil { diff --git a/tests/framework/utils/k8s_helper.go b/tests/framework/utils/k8s_helper.go index 55edf8cd1..32a852900 100644 --- a/tests/framework/utils/k8s_helper.go +++ b/tests/framework/utils/k8s_helper.go @@ -748,6 +748,15 @@ func (k8sh *K8sHelper) CheckForReconciledOperatorVersion(auditConfig *api.Mondoo func (k8sh *K8sHelper) GetWorkloadNames(ctx context.Context) ([]string, error) { var names []string + nss := &v1.NamespaceList{} + if err := k8sh.Clientset.List(ctx, nss); err != nil { + return nil, err + } + + for _, ns := range nss.Items { + names = append(names, ns.Name) + } + // pods pods := &v1.PodList{} if err := k8sh.Clientset.List(ctx, pods); err != nil { From 2f38842e3b1ba6ce273eb9def5c13a797c31f1eb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 5 Jun 2025 12:23:38 +0200 Subject: [PATCH 03/20] Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.2 (#1238) Bumps [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) from 4.5.0 to 4.5.2. - [Release notes](https://github.com/golang-jwt/jwt/releases) - [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md) - [Commits](https://github.com/golang-jwt/jwt/compare/v4.5.0...v4.5.2) --- updated-dependencies: - dependency-name: github.com/golang-jwt/jwt/v4 dependency-version: 4.5.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index 6ac23a9dd..5d0f967a7 100644 --- a/go.mod +++ b/go.mod @@ -18,7 +18,7 @@ replace k8s.io/client-go => k8s.io/client-go v0.28.9 require ( github.com/cert-manager/cert-manager v1.14.5 github.com/gobwas/glob v0.2.3 - github.com/golang-jwt/jwt/v4 v4.5.0 + github.com/golang-jwt/jwt/v4 v4.5.2 github.com/golang/mock v1.6.0 github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.74.0 github.com/rs/zerolog v1.33.0 diff --git a/go.sum b/go.sum index e4fd6e09e..a397b9ca5 100644 --- a/go.sum +++ b/go.sum @@ -387,8 +387,8 @@ github.com/gofrs/uuid v4.4.0+incompatible/go.mod h1:b2aQJv3Z4Fp6yNu3cdSllBxTCLRx github.com/gogo/protobuf v1.1.1/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ= github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q= github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q= -github.com/golang-jwt/jwt/v4 v4.5.0 h1:7cYmW1XlMY7h7ii7UhUyChSgS5wUJEnm9uZVTGqOWzg= -github.com/golang-jwt/jwt/v4 v4.5.0/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0= +github.com/golang-jwt/jwt/v4 v4.5.2 h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI= +github.com/golang-jwt/jwt/v4 v4.5.2/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0= github.com/golang-jwt/jwt/v5 v5.2.1 h1:OuVbFODueb089Lh128TAcimifWaLhJwVflnrgM17wHk= github.com/golang-jwt/jwt/v5 v5.2.1/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk= github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q= From da42a9d6f72ba019eeb6b125217f95c5cbd236f2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 5 Jun 2025 12:24:24 +0200 Subject: [PATCH 04/20] Bump github.com/go-git/go-git/v5 from 5.12.0 to 5.13.0 (#1239) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.12.0 to 5.13.0. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.12.0...v5.13.0) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.13.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- go.mod | 18 +++++++++--------- go.sum | 60 +++++++++++++++++++++++----------------------------------- 2 files changed, 33 insertions(+), 45 deletions(-) diff --git a/go.mod b/go.mod index 5d0f967a7..f4079401e 100644 --- a/go.mod +++ b/go.mod @@ -56,7 +56,7 @@ require ( github.com/GoogleCloudPlatform/berglas v1.0.3 // indirect github.com/Masterminds/semver v1.5.0 // indirect github.com/Microsoft/go-winio v0.6.2 // indirect - github.com/ProtonMail/go-crypto v1.0.0 // indirect + github.com/ProtonMail/go-crypto v1.1.3 // indirect github.com/alecthomas/participle v0.3.0 // indirect github.com/anchore/go-struct-converter v0.0.0-20221118182256-c68fdcfa2092 // indirect github.com/atotto/clipboard v0.1.4 // indirect @@ -112,8 +112,8 @@ require ( github.com/felixge/httpsnoop v1.0.4 // indirect github.com/getsentry/sentry-go v0.28.1 // indirect github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect - github.com/go-git/go-billy/v5 v5.5.0 // indirect - github.com/go-git/go-git/v5 v5.12.0 // indirect + github.com/go-git/go-billy/v5 v5.6.0 // indirect + github.com/go-git/go-git/v5 v5.13.0 // indirect github.com/go-jose/go-jose/v3 v3.0.4 // indirect github.com/go-jose/go-jose/v4 v4.0.4 // indirect github.com/go-logr/stdr v1.2.2 // indirect @@ -216,7 +216,7 @@ require ( go.uber.org/mock v0.4.0 // indirect golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 // indirect golang.org/x/mod v0.19.0 // indirect - golang.org/x/sync v0.7.0 // indirect + golang.org/x/sync v0.10.0 // indirect golang.org/x/tools v0.23.0 // indirect google.golang.org/api v0.189.0 // indirect google.golang.org/genproto v0.0.0-20240725223205-93522f1f2a9f // indirect @@ -257,12 +257,12 @@ require ( github.com/spf13/pflag v1.0.6-0.20201009195203-85dd5c8bc61c // indirect go.uber.org/multierr v1.11.0 // indirect go.uber.org/zap v1.27.0 - golang.org/x/crypto v0.25.0 // indirect - golang.org/x/net v0.27.0 // indirect + golang.org/x/crypto v0.31.0 // indirect + golang.org/x/net v0.33.0 // indirect golang.org/x/oauth2 v0.30.0 // indirect - golang.org/x/sys v0.22.0 // indirect - golang.org/x/term v0.22.0 // indirect - golang.org/x/text v0.16.0 // indirect + golang.org/x/sys v0.28.0 // indirect + golang.org/x/term v0.27.0 // indirect + golang.org/x/text v0.21.0 // indirect golang.org/x/time v0.5.0 // indirect gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect google.golang.org/protobuf v1.34.2 diff --git a/go.sum b/go.sum index a397b9ca5..0255ff7af 100644 --- a/go.sum +++ b/go.sum @@ -98,8 +98,8 @@ github.com/Microsoft/go-winio v0.5.2/go.mod h1:WpS1mjBmmwHBEWmogvA2mj8546UReBk4v github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY= github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU= github.com/OneOfOne/xxhash v1.2.2/go.mod h1:HSdplMjZKSmBqAxg5vPj2TmRDmfkzw+cTzAElWljhcU= -github.com/ProtonMail/go-crypto v1.0.0 h1:LRuvITjQWX+WIfr930YHG2HNfjR1uOfyf5vE0kC2U78= -github.com/ProtonMail/go-crypto v1.0.0/go.mod h1:EjAoLdwvbIOoOQr3ihjnSoLZRtE8azugULFRteWMNc0= +github.com/ProtonMail/go-crypto v1.1.3 h1:nRBOetoydLeUb4nHajyO2bKqMLfWQ/ZPwkXqXxPxCFk= +github.com/ProtonMail/go-crypto v1.1.3/go.mod h1:rA3QumHc/FZ8pAHreoekgiAbzpNsfQAosU5td4SnOrE= github.com/StackExchange/wmi v1.2.1 h1:VIkavFPXSjcnS+O8yTq7NI32k0R5Aj+v39y29VYDOSA= github.com/StackExchange/wmi v1.2.1/go.mod h1:rcmrprowKIVzvc+NUiLncP2uuArMWLCbu9SBzvHz7e8= github.com/agext/levenshtein v1.2.3 h1:YB2fHEn0UJagG8T1rrWknE3ZQzWM06O8AMAatNn7lmo= @@ -196,7 +196,6 @@ github.com/bradleyjkemp/cupaloy/v2 v2.8.0 h1:any4BmKE+jGIaMpnU8YgH/I2LPiLBufr6oM github.com/bradleyjkemp/cupaloy/v2 v2.8.0/go.mod h1:bm7JXdkRd4BHJk9HpwqAI8BoAY1lps46Enkdqw6aRX0= github.com/bufbuild/protocompile v0.4.0 h1:LbFKd2XowZvQ/kajzguUp2DC9UEIQhIq77fZZlaQsNA= github.com/bufbuild/protocompile v0.4.0/go.mod h1:3v93+mbWn/v3xzN+31nwkJfrEpAUwp+BagBSZWx+TP8= -github.com/bwesterb/go-ristretto v1.2.3/go.mod h1:fUIoIZaG73pV5biE2Blr2xEzDoMj7NFEuV9ekS419A0= github.com/c-bata/go-prompt v0.2.6 h1:POP+nrHE+DfLYx370bedwNhsqmpCUynWPxuHi0C5vZI= github.com/c-bata/go-prompt v0.2.6/go.mod h1:/LMAke8wD2FsNu9EXNdHxNLbd9MedkPnCdfpU9wwHfY= github.com/cenkalti/backoff/v3 v3.2.2 h1:cfUAAO3yvKMYKPrvhDuHSwQnhZNk/RMHKdZqKTxfm6M= @@ -232,7 +231,6 @@ github.com/chzyer/test v0.0.0-20180213035817-a1ea475d72b1/go.mod h1:Q3SI9o4m/ZMn github.com/circonus-labs/circonus-gometrics v2.3.1+incompatible/go.mod h1:nmEj6Dob7S7YxXgwXpfOuvO54S+tGdZdw9fuRZt25Ag= github.com/circonus-labs/circonusllhist v0.1.3/go.mod h1:kMXHVDlOchFAehlya5ePtbp5jckzBHf4XRpQvBOLI+I= github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw= -github.com/cloudflare/circl v1.3.3/go.mod h1:5XYMA4rFBvNIrhs50XuiBJ15vF2pZn4nnUKZrLbUZFA= github.com/cloudflare/circl v1.3.9 h1:QFrlgFYf2Qpi8bSpVPK1HBvWpx16v/1TZivyo7pGuBE= github.com/cloudflare/circl v1.3.9/go.mod h1:PDRU+oXvdD7KCtgKxW95M5Z8BpSCJXQORiZFnBQS5QU= github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc= @@ -290,8 +288,8 @@ github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkp github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto= github.com/dvsekhvalnov/jose2go v1.7.0 h1:bnQc8+GMnidJZA8zc6lLEAb4xNrIqHwO+9TzqvtQZPo= github.com/dvsekhvalnov/jose2go v1.7.0/go.mod h1:QsHjhyTlD/lAVqn/NSbVZmSCGeDehTB/mPZadG+mhXU= -github.com/elazarl/goproxy v0.0.0-20230808193330-2592e75ae04a h1:mATvB/9r/3gvcejNsXKSkQ6lcIaNec2nyfOdlTBR2lU= -github.com/elazarl/goproxy v0.0.0-20230808193330-2592e75ae04a/go.mod h1:Ro8st/ElPeALwNFlcTpWmkr6IoMFfkjXAvTHpevnDsM= +github.com/elazarl/goproxy v1.2.1 h1:njjgvO6cRG9rIqN2ebkqy6cQz2Njkx7Fsfv/zIZqgug= +github.com/elazarl/goproxy v1.2.1/go.mod h1:YfEbZtqP4AetfO6d40vWchF3znWX7C7Vd6ZMfdL8z64= github.com/emicklei/go-restful/v3 v3.11.2 h1:1onLa9DcsMYO9P+CXaL0dStDqQ2EHHXLiz+BtnqkLAU= github.com/emicklei/go-restful/v3 v3.11.2/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc= github.com/emirpasic/gods v1.18.1 h1:FXtiHYKDGKCW2KzwZKx0iC0PQmdlorYgdFG9jPXJ1Bc= @@ -333,18 +331,18 @@ github.com/getsentry/sentry-go v0.28.1/go.mod h1:1fQZ+7l7eeJ3wYi82q5Hg8GqAPgefRq github.com/ghodss/yaml v1.0.0/go.mod h1:4dBDuWmgqj2HViK6kFavaiC9ZROes6MMH2rRYeMEF04= github.com/glebarez/go-sqlite v1.22.0 h1:uAcMJhaA6r3LHMTFgP0SifzgXg46yJkgxqyuyec+ruQ= github.com/glebarez/go-sqlite v1.22.0/go.mod h1:PlBIdHe0+aUEFn+r2/uthrWq4FxbzugL0L8Li6yQJbc= -github.com/gliderlabs/ssh v0.3.7 h1:iV3Bqi942d9huXnzEF2Mt+CY9gLu8DNM4Obd+8bODRE= -github.com/gliderlabs/ssh v0.3.7/go.mod h1:zpHEXBstFnQYtGnB8k8kQLol82umzn/2/snG7alWVD8= +github.com/gliderlabs/ssh v0.3.8 h1:a4YXD1V7xMF9g5nTkdfnja3Sxy1PVDCj1Zg4Wb8vY6c= +github.com/gliderlabs/ssh v0.3.8/go.mod h1:xYoytBv1sV0aL3CavoDuJIQNURXkkfPA/wxQ1pL1fAU= github.com/go-errors/errors v1.5.0 h1:/EuijeGOu7ckFxzhkj4CXJ8JaenxK7bKUxpPYqeLHqQ= github.com/go-errors/errors v1.5.0/go.mod h1:sIVyrIiJhuEF+Pj9Ebtd6P/rEYROXFi3BopGUQ5a5Og= github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 h1:+zs/tPmkDkHx3U66DAb0lQFJrpS6731Oaa12ikc+DiI= github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376/go.mod h1:an3vInlBmSxCcxctByoQdvwPiA7DTK7jaaFDBTtu0ic= -github.com/go-git/go-billy/v5 v5.5.0 h1:yEY4yhzCDuMGSv83oGxiBotRzhwhNr8VZyphhiu+mTU= -github.com/go-git/go-billy/v5 v5.5.0/go.mod h1:hmexnoNsr2SJU1Ju67OaNz5ASJY3+sHgFRpCtpDCKow= +github.com/go-git/go-billy/v5 v5.6.0 h1:w2hPNtoehvJIxR00Vb4xX94qHQi/ApZfX+nBE2Cjio8= +github.com/go-git/go-billy/v5 v5.6.0/go.mod h1:sFDq7xD3fn3E0GOwUSZqHo9lrkmx8xJhA0ZrfvjBRGM= github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20231010084843-55a94097c399 h1:eMje31YglSBqCdIqdhKBW8lokaMrL3uTkpGYlE2OOT4= github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20231010084843-55a94097c399/go.mod h1:1OCfN199q1Jm3HZlxleg+Dw/mwps2Wbk9frAWm+4FII= -github.com/go-git/go-git/v5 v5.12.0 h1:7Md+ndsjrzZxbddRDZjF14qK+NN56sy6wkqaVrjZtys= -github.com/go-git/go-git/v5 v5.12.0/go.mod h1:FTM9VKtnI2m65hNI/TenDDDnUf2Q9FHnXYjuz9i5OEY= +github.com/go-git/go-git/v5 v5.13.0 h1:vLn5wlGIh/X78El6r3Jr+30W16Blk0CTcxTYcYPWi5E= +github.com/go-git/go-git/v5 v5.13.0/go.mod h1:Wjo7/JyVKtQgUNdXYXIepzWfJQkUEIGvkvVkiXRR/zw= github.com/go-gl/glfw v0.0.0-20190409004039-e6da0acd62b1/go.mod h1:vR7hzQXu2zJy9AVAgeJqvqgH9Q5CA+iKCZ2gyEVpxRU= github.com/go-gl/glfw/v3.3/glfw v0.0.0-20191125211704-12ad95a8df72/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8= github.com/go-gl/glfw/v3.3/glfw v0.0.0-20200222043503-6f7a984d4dc4/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8= @@ -717,8 +715,8 @@ github.com/oklog/run v1.1.0 h1:GEenZ1cK0+q0+wsJew9qUg/DyD8k3JzYsZAi5gYi2mA= github.com/oklog/run v1.1.0/go.mod h1:sVPdnTZT1zYwAJeCMu2Th4T21pA3FPOQRfWjQlk7DVU= github.com/onsi/ginkgo/v2 v2.17.3 h1:oJcvKpIb7/8uLpDDtnQuf18xVnwKp8DTD7DQ6gTd/MU= github.com/onsi/ginkgo/v2 v2.17.3/go.mod h1:nP2DPOQoNsQmsVyv5rDA8JkXQoCs6goXIvr/PRJ1eCc= -github.com/onsi/gomega v1.33.1 h1:dsYjIxxSR755MDmKVsaFQTE22ChNBcuuTWgkUDSubOk= -github.com/onsi/gomega v1.33.1/go.mod h1:U4R44UsT+9eLIaYRB2a5qajjtQYn0hauxvRm16AVYg0= +github.com/onsi/gomega v1.34.1 h1:EUMJIKUjM8sKjYbtxQI9A4z2o+rruxnzNvpknOXie6k= +github.com/onsi/gomega v1.34.1/go.mod h1:kU1QgUvBDLXBJq618Xvm2LUX6rSAfRaFRTcdOeDLwwY= github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U= github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM= github.com/opencontainers/image-spec v1.1.0 h1:8SG7/vwALn54lVB/0yZ/MMwhFrPYtpEHQb2IpWsCzug= @@ -954,11 +952,9 @@ golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPh golang.org/x/crypto v0.0.0-20210817164053-32db794688a5/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4= -golang.org/x/crypto v0.3.1-0.20221117191849-2c476679df9a/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4= -golang.org/x/crypto v0.7.0/go.mod h1:pYwdfH91IfpZVANVyUOhSIPZaFoJGxTFbZhFTx+dXZU= golang.org/x/crypto v0.19.0/go.mod h1:Iy9bg/ha4yyC70EfRS8jz+B6ybOBKMaSxLj6P6oBDfU= -golang.org/x/crypto v0.25.0 h1:ypSNr+bnYL2YhwoMt2zPxHFmbAN1KZs/njMG3hxUp30= -golang.org/x/crypto v0.25.0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M= +golang.org/x/crypto v0.31.0 h1:ihbySMvVjLAeSH1IbfcRTkD/iNscyz8rGzjF/E5hV6U= +golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk= golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8= @@ -1044,12 +1040,10 @@ golang.org/x/net v0.0.0-20210503060351-7fd8e65b6420/go.mod h1:9nx3DQGgdP8bBQD5qx golang.org/x/net v0.0.0-20210813160813-60bc85c4be6d/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y= golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y= golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c= -golang.org/x/net v0.2.0/go.mod h1:KqCZLdyyvdV855qA2rE3GC2aiw5xGR5TEjj8smXukLY= golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs= -golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc= golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg= -golang.org/x/net v0.27.0 h1:5K3Njcw06/l2y9vpGCSdcxWOYHOUk3dVNGDXN+FvAys= -golang.org/x/net v0.27.0/go.mod h1:dDi0PyhWNoiUOrAS8uXv/vnScO4wnHQO4mj9fn/RytE= +golang.org/x/net v0.33.0 h1:74SYHlV8BIgHIFC/LrYkOGIwL19eTYXQ5wc6TBuO36I= +golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4= golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= @@ -1082,8 +1076,8 @@ golang.org/x/sync v0.0.0-20201207232520-09787c993a3a/go.mod h1:RxMgew5VJxzue5/jJ golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= -golang.org/x/sync v0.7.0 h1:YsImfSBoP9QPYL0xyKJPq0gcaJdG3rInoqxTWbfQu9M= -golang.org/x/sync v0.7.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= +golang.org/x/sync v0.10.0 h1:3NQrjDixjgGwUOCaF8w2+VYHv0Ve/vGYSbdkTa98gmQ= +golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sys v0.0.0-20180823144017-11551d06cbcc/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= @@ -1159,24 +1153,20 @@ golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBc golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.2.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.3.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= -golang.org/x/sys v0.22.0 h1:RI27ohtqKCnwULzJLqkv897zojh5/DwS/ENaMzUOaWI= -golang.org/x/sys v0.22.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA= +golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= -golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc= golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k= -golang.org/x/term v0.6.0/go.mod h1:m6U89DPEgQRMq3DNkDClhWw02AUbt2daBVO4cn4Hv9U= golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo= golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk= -golang.org/x/term v0.22.0 h1:BbsgPEJULsl2fV/AT3v15Mjva5yXKQDyKf+TbDz7QJk= -golang.org/x/term v0.22.0/go.mod h1:F3qCibpT5AMpCRfhfT53vVJwhLtIVHhB9XDjfFvnMI4= +golang.org/x/term v0.27.0 h1:WP60Sv1nlK1T6SupCHbXzSaN0b9wUmsPoRS9b61A23Q= +golang.org/x/term v0.27.0/go.mod h1:iMsnZpn0cago0GOrHO2+Y7u7JPn5AylBrcoWkElMTSM= golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= @@ -1186,13 +1176,11 @@ golang.org/x/text v0.3.4/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.5/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= -golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= -golang.org/x/text v0.8.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8= golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8= golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU= -golang.org/x/text v0.16.0 h1:a94ExnEXNtEwYLGJSIUxnWoxoRz/ZcCsV63ROupILh4= -golang.org/x/text v0.16.0/go.mod h1:GhwF1Be+LQoKShO3cGOHzqOgRrGaYc9AvblQOmPVHnI= +golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo= +golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ= golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= From a4a6a779c79acff2a1c3d3803b908a2c2f6cd0fc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 5 Jun 2025 12:24:40 +0200 Subject: [PATCH 05/20] Bump check-spelling/check-spelling from 0.0.24 to 0.0.25 (#1241) Bumps [check-spelling/check-spelling](https://github.com/check-spelling/check-spelling) from 0.0.24 to 0.0.25. - [Release notes](https://github.com/check-spelling/check-spelling/releases) - [Commits](https://github.com/check-spelling/check-spelling/compare/v0.0.24...v0.0.25) --- updated-dependencies: - dependency-name: check-spelling/check-spelling dependency-version: 0.0.25 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/spell-check.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/spell-check.yaml b/.github/workflows/spell-check.yaml index 523cb28e4..888a4f1aa 100644 --- a/.github/workflows/spell-check.yaml +++ b/.github/workflows/spell-check.yaml @@ -23,7 +23,7 @@ jobs: steps: - name: check-spelling id: spelling - uses: check-spelling/check-spelling@v0.0.24 + uses: check-spelling/check-spelling@v0.0.25 with: disable_checks: noisy-file suppress_push_for_open_pull_request: 1 @@ -48,7 +48,7 @@ jobs: if: (success() || failure()) && needs.spelling.outputs.followup steps: - name: comment - uses: check-spelling/check-spelling@v0.0.24 + uses: check-spelling/check-spelling@v0.0.25 with: checkout: true task: ${{ needs.spelling.outputs.followup }} From 7296f1eeed9c9c189b7bb9573abb016a5cecc0a4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 5 Jun 2025 12:36:45 +0200 Subject: [PATCH 06/20] Bump golang.org/x/crypto from 0.25.0 to 0.35.0 (#1237) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.25.0 to 0.35.0. - [Commits](https://github.com/golang/crypto/compare/v0.25.0...v0.35.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-version: 0.35.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- go.mod | 10 +++++----- go.sum | 20 ++++++++++---------- 2 files changed, 15 insertions(+), 15 deletions(-) diff --git a/go.mod b/go.mod index f4079401e..1ebd88d1b 100644 --- a/go.mod +++ b/go.mod @@ -216,7 +216,7 @@ require ( go.uber.org/mock v0.4.0 // indirect golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 // indirect golang.org/x/mod v0.19.0 // indirect - golang.org/x/sync v0.10.0 // indirect + golang.org/x/sync v0.11.0 // indirect golang.org/x/tools v0.23.0 // indirect google.golang.org/api v0.189.0 // indirect google.golang.org/genproto v0.0.0-20240725223205-93522f1f2a9f // indirect @@ -257,12 +257,12 @@ require ( github.com/spf13/pflag v1.0.6-0.20201009195203-85dd5c8bc61c // indirect go.uber.org/multierr v1.11.0 // indirect go.uber.org/zap v1.27.0 - golang.org/x/crypto v0.31.0 // indirect + golang.org/x/crypto v0.35.0 // indirect golang.org/x/net v0.33.0 // indirect golang.org/x/oauth2 v0.30.0 // indirect - golang.org/x/sys v0.28.0 // indirect - golang.org/x/term v0.27.0 // indirect - golang.org/x/text v0.21.0 // indirect + golang.org/x/sys v0.30.0 // indirect + golang.org/x/term v0.29.0 // indirect + golang.org/x/text v0.22.0 // indirect golang.org/x/time v0.5.0 // indirect gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect google.golang.org/protobuf v1.34.2 diff --git a/go.sum b/go.sum index 0255ff7af..6a921fdb8 100644 --- a/go.sum +++ b/go.sum @@ -953,8 +953,8 @@ golang.org/x/crypto v0.0.0-20210817164053-32db794688a5/go.mod h1:GvvjBRRGRdwPK5y golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4= golang.org/x/crypto v0.19.0/go.mod h1:Iy9bg/ha4yyC70EfRS8jz+B6ybOBKMaSxLj6P6oBDfU= -golang.org/x/crypto v0.31.0 h1:ihbySMvVjLAeSH1IbfcRTkD/iNscyz8rGzjF/E5hV6U= -golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk= +golang.org/x/crypto v0.35.0 h1:b15kiHdrGCHrP6LvwaQ3c03kgNhhiMgvlhxHQhmg2Xs= +golang.org/x/crypto v0.35.0/go.mod h1:dy7dXNW32cAb/6/PRuTNsix8T+vJAqvuIy5Bli/x0YQ= golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8= @@ -1076,8 +1076,8 @@ golang.org/x/sync v0.0.0-20201207232520-09787c993a3a/go.mod h1:RxMgew5VJxzue5/jJ golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= -golang.org/x/sync v0.10.0 h1:3NQrjDixjgGwUOCaF8w2+VYHv0Ve/vGYSbdkTa98gmQ= -golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= +golang.org/x/sync v0.11.0 h1:GGz8+XQP4FvTTrjZPzNKTMFtSXH80RAzG+5ghFPgK9w= +golang.org/x/sync v0.11.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sys v0.0.0-20180823144017-11551d06cbcc/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= @@ -1158,15 +1158,15 @@ golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= -golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA= -golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +golang.org/x/sys v0.30.0 h1:QjkSwP/36a20jFYWkSue1YwXzLmsV5Gfq7Eiy72C1uc= +golang.org/x/sys v0.30.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k= golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo= golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk= -golang.org/x/term v0.27.0 h1:WP60Sv1nlK1T6SupCHbXzSaN0b9wUmsPoRS9b61A23Q= -golang.org/x/term v0.27.0/go.mod h1:iMsnZpn0cago0GOrHO2+Y7u7JPn5AylBrcoWkElMTSM= +golang.org/x/term v0.29.0 h1:L6pJp37ocefwRRtYPKSWOWzOtWSxVajvz2ldH/xi3iU= +golang.org/x/term v0.29.0/go.mod h1:6bl4lRlvVuDgSf3179VpIxBF0o10JUpXWOnI7nErv7s= golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= @@ -1179,8 +1179,8 @@ golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8= golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU= -golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo= -golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ= +golang.org/x/text v0.22.0 h1:bofq7m3/HAFvbF51jz3Q9wLg3jkvSPuiZu/pD1XwgtM= +golang.org/x/text v0.22.0/go.mod h1:YRoo4H8PVmsu+E3Ou7cqLVH8oXWIHVoX0jqUWALQhfY= golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= From ba9f99f878fafb986e245ad20faab5f70f24d5da Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 5 Jun 2025 12:37:10 +0200 Subject: [PATCH 07/20] Bump dawidd6/action-download-artifact from 9 to 10 (#1245) Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) from 9 to 10. - [Release notes](https://github.com/dawidd6/action-download-artifact/releases) - [Commits](https://github.com/dawidd6/action-download-artifact/compare/v9...v10) --- updated-dependencies: - dependency-name: dawidd6/action-download-artifact dependency-version: '10' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/test-report.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/test-report.yaml b/.github/workflows/test-report.yaml index 3c9db3033..969a81c13 100644 --- a/.github/workflows/test-report.yaml +++ b/.github/workflows/test-report.yaml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Download and Extract Artifacts - uses: dawidd6/action-download-artifact@v9 + uses: dawidd6/action-download-artifact@v10 with: run_id: ${{ github.event.workflow_run.id }} path: artifacts From 6b440f2f64c141b51ff4ef48b69ff237c06feed3 Mon Sep 17 00:00:00 2001 From: Ivan Milchev Date: Thu, 5 Jun 2025 14:00:03 +0300 Subject: [PATCH 08/20] =?UTF-8?q?=F0=9F=A7=B9=20drop=20cloud=20tests=20fro?= =?UTF-8?q?m=20readme=20badges=20(#1249)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Ivan Milchev --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index dd7073ac4..c9695a8cb 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@ # Mondoo Operator for Kubernetes [![Tests](https://github.com/mondoohq/mondoo-operator/actions/workflows/tests.yaml/badge.svg)](https://github.com/mondoohq/mondoo-operator/actions/workflows/tests.yaml) -[![Edge integration tests](https://github.com/mondoohq/mondoo-operator/actions/workflows/edge-integration-tests.yaml/badge.svg)](https://github.com/mondoohq/mondoo-operator/actions/workflows/edge-integration-tests.yaml) -[![Cloud tests](https://github.com/mondoohq/mondoo-operator/actions/workflows/cloud-tests.yaml/badge.svg)](https://github.com/mondoohq/mondoo-operator/actions/workflows/cloud-tests.yaml) + + > **Project Status**: This project is stable. Any API and CRD changes will be handled in way where previous versions are kept working or migrated. From 0db8b66129f5617cbb4d02f512c0707ca51ba0a1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 4 Jul 2025 09:50:44 +0200 Subject: [PATCH 09/20] Bump dawidd6/action-download-artifact from 10 to 11 (#1251) Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) from 10 to 11. - [Release notes](https://github.com/dawidd6/action-download-artifact/releases) - [Commits](https://github.com/dawidd6/action-download-artifact/compare/v10...v11) --- updated-dependencies: - dependency-name: dawidd6/action-download-artifact dependency-version: '11' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/test-report.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/test-report.yaml b/.github/workflows/test-report.yaml index 969a81c13..83f7f516d 100644 --- a/.github/workflows/test-report.yaml +++ b/.github/workflows/test-report.yaml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Download and Extract Artifacts - uses: dawidd6/action-download-artifact@v10 + uses: dawidd6/action-download-artifact@v11 with: run_id: ${{ github.event.workflow_run.id }} path: artifacts From 7b2eca4595bf0ec28ebea9df03889e212d581a1c Mon Sep 17 00:00:00 2001 From: pratik-mondoo Date: Mon, 15 Sep 2025 15:54:54 +0200 Subject: [PATCH 10/20] add tolerations for all nodes to scanning daemonset (#1260) --- .github/actions/link-check/config.json | 3 + .../workflows/leftover-spaces-cleaner.yaml | 27 ++++++ .github/workflows/link-check.yaml | 33 ++++---- cmd/test-space-cleaner/main.go | 82 +++++++++++++++++++ controllers/nodes/deployment_handler.go | 12 ++- controllers/nodes/deployment_handler_test.go | 11 ++- controllers/nodes/resources.go | 4 + controllers/nodes/resources_test.go | 2 +- 8 files changed, 152 insertions(+), 22 deletions(-) create mode 100644 .github/actions/link-check/config.json create mode 100644 .github/workflows/leftover-spaces-cleaner.yaml create mode 100644 cmd/test-space-cleaner/main.go diff --git a/.github/actions/link-check/config.json b/.github/actions/link-check/config.json new file mode 100644 index 000000000..c9b016b75 --- /dev/null +++ b/.github/actions/link-check/config.json @@ -0,0 +1,3 @@ +{ + "aliveStatusCodes": [429, 200, 406] +} \ No newline at end of file diff --git a/.github/workflows/leftover-spaces-cleaner.yaml b/.github/workflows/leftover-spaces-cleaner.yaml new file mode 100644 index 000000000..e095ffb5e --- /dev/null +++ b/.github/workflows/leftover-spaces-cleaner.yaml @@ -0,0 +1,27 @@ +name: Leftover spaces cleanup + +on: + schedule: + # Every Sunday at 11PM + - cron: '0 23 * * 0' + +jobs: + build: + runs-on: ubuntu-latest + name: Leftover spaces cleanup + steps: + - uses: actions/checkout@v4 + + - name: Set up Go + uses: actions/setup-go@v4 + with: + go-version: '1.24' + + - name: Run leftover spaces cleanup + run: go run cmd/test-space-cleaner/main.go + env: + MONDOO_API_TOKEN: ${{ secrets.MONDOO_TEST_ORG_TOKEN }} + MONDOO_ORG_MRN: '//captain.api.mondoo.app/organizations/mondoo-operator-testing' + MONDOO_GQL_ENDPOINT: 'https://api.mondoo.com/query' + + diff --git a/.github/workflows/link-check.yaml b/.github/workflows/link-check.yaml index bcaaa879a..692d6de51 100644 --- a/.github/workflows/link-check.yaml +++ b/.github/workflows/link-check.yaml @@ -1,19 +1,20 @@ --- - name: Link Checking +name: Link Checking - "on": - pull_request: - push: - branches: [main] +"on": + pull_request: + push: + branches: [main] - jobs: - md-links: - name: Run markdown link check - runs-on: ubuntu-latest - steps: - - name: Check out code - uses: actions/checkout@v4 - - name: markdown-link-check - uses: gaurav-nelson/github-action-markdown-link-check@v1 - with: - use-verbose-mode: "yes" +jobs: + md-links: + name: Run markdown link check + runs-on: ubuntu-latest + steps: + - name: Check out code + uses: actions/checkout@v5 + - name: markdown-link-check + uses: gaurav-nelson/github-action-markdown-link-check@5c5dfc0ac2e225883c0e5f03a85311ec2830d368 + with: + use-verbose-mode: "yes" + config-file: ".github/actions/link-check/config.json" \ No newline at end of file diff --git a/cmd/test-space-cleaner/main.go b/cmd/test-space-cleaner/main.go new file mode 100644 index 000000000..342ef82e9 --- /dev/null +++ b/cmd/test-space-cleaner/main.go @@ -0,0 +1,82 @@ +// Copyright (c) Mondoo, Inc. +// SPDX-License-Identifier: BUSL-1.1 + +package main + +import ( + "context" + "fmt" + + "github.com/rs/zerolog/log" + mondoogql "go.mondoo.com/mondoo-go" + "go.mondoo.com/mondoo-operator/tests/framework/nexus" +) + +func main() { + nexusClient, err := nexus.NewClient() + if err != nil { + log.Fatal().Err(err).Msg("failed to create nexus client") + } + + ctx := context.Background() + spaces, err := ListSpaces(ctx, nexusClient.Client, "//captain.api.mondoo.app/organizations/mondoo-operator-testing") + if err != nil { + log.Fatal().Err(err).Msg("failed to list spaces") + } + for _, space := range spaces.Edges { + if space.Node.Name == "mondoo-operator-tests" { + continue + } + err := Delete(ctx, nexusClient.Client, space.Node.Mrn) + if err != nil { + log.Warn().Err(err).Str("mrn", space.Node.Mrn).Msg("failed to delete space") + continue + } + fmt.Println("Deleted space:", space.Node.Name, "with MRN:", space.Node.Mrn) + log.Info().Str("name", space.Node.Name).Str("mrn", space.Node.Mrn).Msg("deleted space") + } +} + +func Delete(ctx context.Context, gqlClient *mondoogql.Client, mrn string) error { + var m struct { + DeleteSpace string `graphql:"deleteSpace(spaceMrn: $input)"` + } + return gqlClient.Mutate(ctx, &m, nil, map[string]interface{}{ + "input": mondoogql.ID(mrn), + }) +} + +type SpaceConnection struct { + Edges []struct { + Node struct { + Name string + Mrn string + } + } +} + +type OrgWithListSpacesQuery struct { + Id string + Mrn string + Name string + Description string + // TODO: handle pagination + SpaceList SpaceConnection `graphql:"spacesList"` +} + +// TODO: output is not great yet, lets focus on spaces +func ListSpaces(ctx context.Context, gqlClient *mondoogql.Client, orgMrn string) (SpaceConnection, error) { + var q struct { + Organization OrgWithListSpacesQuery `graphql:"organization(mrn: $mrn)"` + } + variables := map[string]interface{}{ + "mrn": mondoogql.String(orgMrn), + } + + err := gqlClient.Query(ctx, &q, variables) + if err != nil { + return SpaceConnection{}, err + } + + return q.Organization.SpaceList, nil +} diff --git a/controllers/nodes/deployment_handler.go b/controllers/nodes/deployment_handler.go index 18920df2d..42a3c39f1 100644 --- a/controllers/nodes/deployment_handler.go +++ b/controllers/nodes/deployment_handler.go @@ -5,6 +5,8 @@ package nodes import ( "context" + "maps" + "slices" "go.mondoo.com/mondoo-operator/api/v1alpha2" "go.mondoo.com/mondoo-operator/pkg/utils/k8s" @@ -226,9 +228,17 @@ func (n *DeploymentHandler) syncDaemonSet(ctx context.Context) error { } } + tolerations := make(map[corev1.Toleration]struct{}) + for _, node := range nodes.Items { + for _, toleration := range k8s.TaintsToTolerations(node.Spec.Taints) { + tolerations[toleration] = struct{}{} + } + } + ds := &appsv1.DaemonSet{ObjectMeta: metav1.ObjectMeta{Name: DaemonSetName(n.Mondoo.Name), Namespace: n.Mondoo.Namespace}} op, err := k8s.CreateOrUpdate(ctx, n.KubeClient, ds, n.Mondoo, logger, func() error { - UpdateDaemonSet(ds, *n.Mondoo, n.IsOpenshift, mondooClientImage, *n.MondooOperatorConfig) + UpdateDaemonSet(ds, *n.Mondoo, n.IsOpenshift, mondooClientImage, *n.MondooOperatorConfig, + slices.Collect(maps.Keys(tolerations))) return nil }) if err != nil { diff --git a/controllers/nodes/deployment_handler_test.go b/controllers/nodes/deployment_handler_test.go index b0a1ac672..8d10c69fa 100644 --- a/controllers/nodes/deployment_handler_test.go +++ b/controllers/nodes/deployment_handler_test.go @@ -461,7 +461,8 @@ func (s *DeploymentHandlerSuite) TestReconcile_CreateDaemonSets() { s.NoError(d.KubeClient.Get(s.ctx, client.ObjectKeyFromObject(ds), ds)) dsExpected := ds.DeepCopy() - UpdateDaemonSet(dsExpected, s.auditConfig, false, image, v1alpha2.MondooOperatorConfig{}) + UpdateDaemonSet(dsExpected, s.auditConfig, false, image, v1alpha2.MondooOperatorConfig{}, + []corev1.Toleration{{Key: "node-role.kubernetes.io/master", Value: "true", Effect: corev1.TaintEffectNoExecute}}) // Make sure the env vars for both are sorted utils.SortEnvVars(dsExpected.Spec.Template.Spec.Containers[0].Env) utils.SortEnvVars(ds.Spec.Template.Spec.Containers[0].Env) @@ -501,7 +502,8 @@ func (s *DeploymentHandlerSuite) TestReconcile_CreateDaemonSets_Switch() { s.NoError(d.KubeClient.Get(s.ctx, client.ObjectKeyFromObject(ds), ds)) dsExpected := ds.DeepCopy() - UpdateDaemonSet(dsExpected, s.auditConfig, false, image, v1alpha2.MondooOperatorConfig{}) + UpdateDaemonSet(dsExpected, s.auditConfig, false, image, v1alpha2.MondooOperatorConfig{}, + []corev1.Toleration{{Key: "node-role.kubernetes.io/master", Value: "true", Effect: corev1.TaintEffectNoExecute}}) s.True(equality.Semantic.DeepEqual(dsExpected, ds)) mondooAuditConfig.Spec.Nodes.Style = v1alpha2.NodeScanStyle_CronJob @@ -546,7 +548,7 @@ func (s *DeploymentHandlerSuite) TestReconcile_UpdateDaemonSets() { // Make sure a daemonset exists ds := &appsv1.DaemonSet{ObjectMeta: metav1.ObjectMeta{Name: DaemonSetName(s.auditConfig.Name), Namespace: s.auditConfig.Namespace}} - UpdateDaemonSet(ds, s.auditConfig, false, image, v1alpha2.MondooOperatorConfig{}) + UpdateDaemonSet(ds, s.auditConfig, false, image, v1alpha2.MondooOperatorConfig{}, nil) ds.Spec.Template.Spec.Containers[0].Command = []string{"test-command"} s.NoError(d.KubeClient.Create(s.ctx, ds)) @@ -558,7 +560,8 @@ func (s *DeploymentHandlerSuite) TestReconcile_UpdateDaemonSets() { s.NoError(d.KubeClient.Get(s.ctx, client.ObjectKeyFromObject(ds), ds)) depExpected := ds.DeepCopy() - UpdateDaemonSet(depExpected, s.auditConfig, false, image, v1alpha2.MondooOperatorConfig{}) + UpdateDaemonSet(depExpected, s.auditConfig, false, image, v1alpha2.MondooOperatorConfig{}, + []corev1.Toleration{{Key: "node-role.kubernetes.io/master", Value: "true", Effect: corev1.TaintEffectNoExecute}}) s.True(equality.Semantic.DeepEqual(depExpected, ds)) } diff --git a/controllers/nodes/resources.go b/controllers/nodes/resources.go index 05a7afc2d..22281ca8c 100644 --- a/controllers/nodes/resources.go +++ b/controllers/nodes/resources.go @@ -192,6 +192,7 @@ func UpdateDaemonSet( isOpenshift bool, image string, cfg v1alpha2.MondooOperatorConfig, + tolerations []corev1.Toleration, ) { labels := NodeScanningLabels(m) cmd := []string{ @@ -222,6 +223,9 @@ func UpdateDaemonSet( // should not be mounted at all. ds.Spec.Template.Spec.AutomountServiceAccountToken = ptr.To(false) containerResources := k8s.ResourcesRequirementsWithDefaults(m.Spec.Nodes.Resources, k8s.DefaultNodeScanningResources) + + ds.Spec.Template.Spec.Tolerations = tolerations + gcLimit := gomemlimit.CalculateGoMemLimit(containerResources) ds.Spec.Template.Spec.Containers = []corev1.Container{ diff --git a/controllers/nodes/resources_test.go b/controllers/nodes/resources_test.go index 04edcf329..df340a1e1 100644 --- a/controllers/nodes/resources_test.go +++ b/controllers/nodes/resources_test.go @@ -189,7 +189,7 @@ func TestResources_GOMEMLIMIT(t *testing.T) { t.Run(test.name, func(t *testing.T) { mac := *test.mondooauditconfig() ds := &appsv1.DaemonSet{ObjectMeta: metav1.ObjectMeta{Name: "name", Namespace: mac.Namespace}} - UpdateDaemonSet(ds, mac, false, "test123", v1alpha2.MondooOperatorConfig{}) + UpdateDaemonSet(ds, mac, false, "test123", v1alpha2.MondooOperatorConfig{}, nil) goMemLimitEnv := corev1.EnvVar{} for _, env := range ds.Spec.Template.Spec.Containers[0].Env { if env.Name == "GOMEMLIMIT" { From bb1b376c12bfe409c2680710c1cadb4bb015c717 Mon Sep 17 00:00:00 2001 From: Christian Zunker <827818+czunker@users.noreply.github.com> Date: Fri, 26 Sep 2025 19:37:05 +0200 Subject: [PATCH 11/20] =?UTF-8?q?=E2=9C=A8=20Pin=20GitHub=20actions=20to?= =?UTF-8?q?=20hashes=20(#1262)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Related to: https://github.com/mondoohq/cnquery/pull/5947 Signed-off-by: Christian Zunker --- .github/workflows/cla.yaml | 2 +- .github/workflows/cloud-tests.yaml | 36 +++++------ .github/workflows/cnspec.yaml | 20 +++--- .github/workflows/integration-tests.yaml | 12 ++-- .../workflows/leftover-spaces-cleaner.yaml | 4 +- .github/workflows/link-check.yaml | 4 +- .github/workflows/lint.yaml | 12 ++-- .github/workflows/publish-images.yaml | 6 +- .github/workflows/publish.yaml | 64 +++++++++---------- .github/workflows/release-manifests.yaml | 6 +- .github/workflows/security-tests.yaml | 4 +- .github/workflows/spell-check.yaml | 4 +- .github/workflows/test-report.yaml | 6 +- .github/workflows/tests-forks.yaml | 6 +- .github/workflows/tests.yaml | 4 +- .github/workflows/unit-tests.yaml | 8 +-- 16 files changed, 99 insertions(+), 99 deletions(-) diff --git a/.github/workflows/cla.yaml b/.github/workflows/cla.yaml index 1f21d4cb4..0702cac7f 100644 --- a/.github/workflows/cla.yaml +++ b/.github/workflows/cla.yaml @@ -11,7 +11,7 @@ jobs: steps: - name: "CLA Assistant" if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the Mondoo CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target' - uses: contributor-assistant/github-action@v2.6.1 + uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08 # v2.6.1 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} PERSONAL_ACCESS_TOKEN: ${{ secrets.CLA_ACCESS_TOKEN }} diff --git a/.github/workflows/cloud-tests.yaml b/.github/workflows/cloud-tests.yaml index 2f890ccb1..752863c09 100644 --- a/.github/workflows/cloud-tests.yaml +++ b/.github/workflows/cloud-tests.yaml @@ -55,7 +55,7 @@ jobs: k8s-version: ["1.27", "1.28", "1.29"] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 with: fetch-depth: 0 # fetch is needed for "git tag --list" in the Makefile @@ -63,7 +63,7 @@ jobs: run: cat ".github/env" >> $GITHUB_ENV - name: Setup Terraform - uses: hashicorp/setup-terraform@v3 + uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2 - name: Terraform init run: terraform init @@ -81,7 +81,7 @@ jobs: TF_VAR_k8s_version: ${{ matrix.k8s-version }} working-directory: .github/terraform/aks - - uses: actions/setup-go@v5 + - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 with: go-version: "${{ env.golang-version }}" cache: true @@ -106,7 +106,7 @@ jobs: if: success() || failure() - name: Upload cloud test results - uses: actions/upload-artifact@v4 # upload test results + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 if: success() || failure() # run this step even if previous step failed with: # upload a combined archive with unit and integration test results name: cloud-test-results-aks-${{ matrix.k8s-version }} @@ -115,7 +115,7 @@ jobs: .github/terraform/aks/aks-${{ matrix.k8s-version }}.json - name: Upload test logs artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 if: failure() with: name: test-logs-aks-${{ matrix.k8s-version }} @@ -138,7 +138,7 @@ jobs: AWS_REGION: us-east-2 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 with: fetch-depth: 0 # fetch is needed for "git tag --list" in the Makefile @@ -146,7 +146,7 @@ jobs: run: cat ".github/env" >> $GITHUB_ENV - name: Setup Terraform - uses: hashicorp/setup-terraform@v3 + uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2 - run: terraform init working-directory: .github/terraform/aws @@ -163,7 +163,7 @@ jobs: TF_VAR_kubernetes_version: ${{ matrix.k8s-version }} working-directory: .github/terraform/aws - - uses: actions/setup-go@v5 + - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 with: go-version: "${{ env.golang-version }}" cache: true @@ -188,14 +188,14 @@ jobs: if: success() || failure() - name: Upload test results - uses: actions/upload-artifact@v4 # upload test results + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 if: success() || failure() # run this step even if previous step failed with: # upload a combined archive with unit and integration test results name: cloud-test-results-eks-${{ matrix.k8s-version }} path: integration-tests-eks-${{ matrix.k8s-version }}.xml - name: Upload test logs artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 if: failure() with: name: test-logs-eks-${{ matrix.k8s-version }} @@ -215,7 +215,7 @@ jobs: KUBECONFIG: ${{ format('{0}/{1}', github.workspace, '.github/terraform/gke/kubeconfig') }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 with: fetch-depth: 0 # fetch is needed for "git tag --list" in the Makefile @@ -226,7 +226,7 @@ jobs: run: echo ${{ secrets.GCP_SERVICE_ACCOUNT }} | base64 -d > gcp_sa.json - name: Setup Terraform - uses: hashicorp/setup-terraform@v3 + uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2 - run: terraform init working-directory: .github/terraform/gke @@ -243,7 +243,7 @@ jobs: TF_VAR_k8s_version: ${{ matrix.k8s-version }} working-directory: .github/terraform/gke - - uses: actions/setup-go@v5 + - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 with: go-version: "${{ env.golang-version }}" cache: true @@ -272,14 +272,14 @@ jobs: if: success() || failure() - name: Upload test results - uses: actions/upload-artifact@v4 # upload test results + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 if: success() || failure() # run this step even if previous step failed with: # upload a combined archive with unit and integration test results name: cloud-test-results-gke-${{ matrix.k8s-version }} path: integration-tests-gke-${{ matrix.k8s-version }}.xml - name: Upload test logs artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 if: failure() with: name: test-logs-gke-${{ matrix.k8s-version }} @@ -292,13 +292,13 @@ jobs: if: always() steps: - name: Download test results - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: pattern: cloud-test-results-* merge-multiple: true - name: Publish Test Results - uses: EnricoMi/publish-unit-test-result-action@v2 + uses: EnricoMi/publish-unit-test-result-action@3a74b2957438d0b6e2e61d67b05318aa25c9e6c6 # v2.20.0 with: commit: ${{ github.event.workflow_run.head_sha }} event_file: ${{ github.event_path }} @@ -312,7 +312,7 @@ jobs: # Run only if the previous job has failed and only if it's running against the main branch if: ${{ always() && contains(join(needs.*.result, ','), 'fail') && github.ref_name == 'main' }} steps: - - uses: sarisia/actions-status-discord@v1 + - uses: sarisia/actions-status-discord@11a0bfe3b50977e38aa2bd4a4ebd296415e83c19 # v1.15.4 with: webhook: ${{ secrets.DISCORD_WEBHOOK }} status: Failure diff --git a/.github/workflows/cnspec.yaml b/.github/workflows/cnspec.yaml index 08708a9a5..d1c6a1599 100644 --- a/.github/workflows/cnspec.yaml +++ b/.github/workflows/cnspec.yaml @@ -31,7 +31,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - name: Sanitize version input (Workflow Dispatch) if: github.event_name == 'workflow_dispatch' @@ -45,34 +45,34 @@ jobs: echo "VERSION=${TAG#v}" >> $GITHUB_ENV - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1 - name: Log into registry ghcr.io - uses: docker/login-action@v3 + uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Authenticate with Google Cloud - uses: "google-github-actions/auth@v2" + uses: "google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed" # v2.1.13 with: credentials_json: "${{ secrets.GCP_ARTIFACT_REGISTRY_SA }}" - name: "Set up Cloud SDK" - uses: "google-github-actions/setup-gcloud@v2" + uses: "google-github-actions/setup-gcloud@e427ad8a34f8676edf47cf7d7925499adf3eb74f" # v2.2.1 - name: Docker Login (GCR) run: | gcloud auth configure-docker us-docker.pkg.dev - name: "Setup Docker Buildx" - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1 - name: Extract Docker metadata id: meta - uses: docker/metadata-action@v5 + uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0 with: images: | ${{ env.GHCR_IMAGE }} @@ -86,7 +86,7 @@ jobs: - name: Build and push cnspec image id: build-and-push-operator - uses: docker/build-push-action@v6 + uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 with: context: . file: cnspec.Dockerfile @@ -94,4 +94,4 @@ jobs: platforms: linux/amd64,linux/arm64 push: true labels: ${{ steps.meta.outputs.labels }} - tags: ${{ steps.meta.outputs.tags }} \ No newline at end of file + tags: ${{ steps.meta.outputs.tags }} diff --git a/.github/workflows/integration-tests.yaml b/.github/workflows/integration-tests.yaml index e04947d68..3ccb4a65f 100644 --- a/.github/workflows/integration-tests.yaml +++ b/.github/workflows/integration-tests.yaml @@ -30,7 +30,7 @@ jobs: k8s-distro: [minikube, k3d] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 with: ref: ${{ github.event.pull_request.head.sha }} persist-credentials: false @@ -46,13 +46,13 @@ jobs: kubernetes-version: ${{ matrix.k8s-version }} - name: Start k3d - uses: nolar/setup-k3d-k3s@v1 + uses: nolar/setup-k3d-k3s@293b8e5822a20bc0d5bcdd4826f1a665e72aba96 # v1.0.9 if: matrix.k8s-distro == 'k3d' with: version: ${{ matrix.k8s-version }} k3d-args: --k3s-arg=--disable=traefik@server:* - - uses: actions/setup-go@v5 + - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 with: go-version: "${{ env.golang-version }}" @@ -76,14 +76,14 @@ jobs: - run: mv integration-tests.xml integration-tests-${{ matrix.k8s-distro }}-${{ matrix.k8s-version }}.xml if: success() || failure() - - uses: actions/upload-artifact@v4 # upload test results + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 if: success() || failure() # run this step even if previous step failed with: # upload a combined archive with unit and integration test results name: test-results-${{ matrix.k8s-distro }}-${{ matrix.k8s-version }} path: integration-tests-${{ matrix.k8s-distro }}-${{ matrix.k8s-version }}.xml - name: Upload test logs artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 if: failure() with: name: test-logs-${{ matrix.k8s-distro }}-${{ matrix.k8s-version }} @@ -96,7 +96,7 @@ jobs: # Run only if the previous job has failed and only if it's running against the main branch if: ${{ always() && contains(join(needs.*.result, ','), 'fail') && github.ref_name == 'main' }} steps: - - uses: sarisia/actions-status-discord@v1 + - uses: sarisia/actions-status-discord@11a0bfe3b50977e38aa2bd4a4ebd296415e83c19 # v1.15.4 with: webhook: ${{ secrets.DISCORD_WEBHOOK }} status: Failure diff --git a/.github/workflows/leftover-spaces-cleaner.yaml b/.github/workflows/leftover-spaces-cleaner.yaml index e095ffb5e..3d247dafa 100644 --- a/.github/workflows/leftover-spaces-cleaner.yaml +++ b/.github/workflows/leftover-spaces-cleaner.yaml @@ -10,10 +10,10 @@ jobs: runs-on: ubuntu-latest name: Leftover spaces cleanup steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - name: Set up Go - uses: actions/setup-go@v4 + uses: actions/setup-go@19bb51245e9c80abacb2e91cc42b33fa478b8639 # v4.2.1 with: go-version: '1.24' diff --git a/.github/workflows/link-check.yaml b/.github/workflows/link-check.yaml index 692d6de51..adce044dd 100644 --- a/.github/workflows/link-check.yaml +++ b/.github/workflows/link-check.yaml @@ -12,9 +12,9 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out code - uses: actions/checkout@v5 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: markdown-link-check uses: gaurav-nelson/github-action-markdown-link-check@5c5dfc0ac2e225883c0e5f03a85311ec2830d368 with: use-verbose-mode: "yes" - config-file: ".github/actions/link-check/config.json" \ No newline at end of file + config-file: ".github/actions/link-check/config.json" diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index 1d753c164..3d8e67897 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -13,19 +13,19 @@ jobs: runs-on: ubuntu-latest name: Lint steps: - - uses: GitHubSecurityLab/actions-permissions/monitor@v1 + - uses: GitHubSecurityLab/actions-permissions/monitor@37c927c24552caa0ef6040ab0876db729cc12754 # v1.0.2-beta7 with: config: ${{ vars.PERMISSIONS_CONFIG }} - - uses: actions/checkout@v4 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - name: Import environment variables from file run: cat ".github/env" >> $GITHUB_ENV - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 with: go-version: ">=${{ env.golang-version }}" cache: false - name: golangci-lint - uses: golangci/golangci-lint-action@v6 + uses: golangci/golangci-lint-action@55c2c1448f86e01eaae002a5a3a9624417608d84 # v6.5.2 with: version: latest args: --timeout=20m0s @@ -34,10 +34,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - name: Setup Copywrite - uses: hashicorp/setup-copywrite@v1.1.3 + uses: hashicorp/setup-copywrite@32638da2d4e81d56a0764aa1547882fc4d209636 # v1.1.3 - name: Check Header Compliance run: copywrite headers --plan diff --git a/.github/workflows/publish-images.yaml b/.github/workflows/publish-images.yaml index 1e58f3c50..fea8afa81 100644 --- a/.github/workflows/publish-images.yaml +++ b/.github/workflows/publish-images.yaml @@ -30,14 +30,14 @@ jobs: arch: [amd64, arm64, arm] steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - name: Import environment variables from file run: cat ".github/env" >> $GITHUB_ENV - name: Extract Docker metadata id: meta - uses: docker/metadata-action@v5 + uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0 with: images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} tags: | @@ -52,6 +52,6 @@ jobs: # https://github.com/docker/metadata-action - name: Extract Docker metadata (without suffixes) id: meta_clean - uses: docker/metadata-action@v5 + uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0 with: images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 68fb2000f..37f5f330f 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -44,12 +44,12 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - name: Import environment variables from file run: cat ".github/env" >> $GITHUB_ENV - - uses: actions/setup-go@v5 + - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 with: go-version: "${{ env.golang-version }}" cache: true @@ -57,24 +57,24 @@ jobs: # Install the cosign tool except on PR # https://github.com/sigstore/cosign-installer - name: Install cosign - uses: sigstore/cosign-installer@v3 + uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1 # Login against a Docker registry except on PR # https://github.com/docker/login-action - name: Log into registry ${{ env.REGISTRY }} - uses: docker/login-action@v3 + uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Authenticate with Google Cloud - uses: "google-github-actions/auth@v2" + uses: "google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed" # v2.1.13 with: credentials_json: "${{ secrets.GCP_ARTIFACT_REGISTRY_SA }}" - name: "Set up Cloud SDK" - uses: "google-github-actions/setup-gcloud@v2" + uses: "google-github-actions/setup-gcloud@e427ad8a34f8676edf47cf7d7925499adf3eb74f" # v2.2.1 - name: Docker Login (GCR) run: | @@ -84,7 +84,7 @@ jobs: # https://github.com/docker/metadata-action - name: Extract Docker metadata id: meta - uses: docker/metadata-action@v5 + uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0 with: images: | ${{ env.GHCR_IMAGE }} @@ -101,7 +101,7 @@ jobs: # https://github.com/docker/metadata-action - name: Extract Docker metadata (without suffixes) id: meta_clean - uses: docker/metadata-action@v5 + uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0 with: images: | ${{ env.GHCR_IMAGE }} @@ -119,7 +119,7 @@ jobs: # https://github.com/docker/build-push-action - name: Build and push operator image id: build-and-push-operator - uses: docker/build-push-action@v6 + uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 with: context: . platforms: ${{ matrix.os }}/${{ matrix.arch }} @@ -159,29 +159,29 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 # Install the cosign tool except on PR # https://github.com/sigstore/cosign-installer - name: Install cosign - uses: sigstore/cosign-installer@v3 + uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1 # Login against a Docker registry except on PR # https://github.com/docker/login-action - name: Log into registry ${{ env.REGISTRY }} - uses: docker/login-action@v3 + uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Authenticate with Google Cloud - uses: "google-github-actions/auth@v2" + uses: "google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed" # v2.1.13 with: credentials_json: "${{ secrets.GCP_ARTIFACT_REGISTRY_SA }}" - name: "Set up Cloud SDK" - uses: "google-github-actions/setup-gcloud@v2" + uses: "google-github-actions/setup-gcloud@e427ad8a34f8676edf47cf7d7925499adf3eb74f" # v2.2.1 - name: Docker Login (GCR) run: | @@ -191,7 +191,7 @@ jobs: # https://github.com/docker/metadata-action - name: Extract Docker metadata id: meta - uses: docker/metadata-action@v5 + uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0 with: images: | ${{ env.GHCR_IMAGE }} @@ -215,33 +215,33 @@ jobs: # with sigstore/fulcio when running outside of PRs. id-token: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - name: Import environment variables from file run: cat ".github/env" >> $GITHUB_ENV - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 with: go-version: "${{ env.golang-version }}" # Install the cosign tool except on PR # https://github.com/sigstore/cosign-installer - name: Install cosign - uses: sigstore/cosign-installer@v3 + uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1 - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0 with: image: tonistiigi/binfmt:latest platforms: amd64,arm # Workaround: https://github.com/docker/build-push-action/issues/461 - name: Setup Docker buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1 # Login against a Docker registry except on PR # https://github.com/docker/login-action - name: Log into registry ${{ env.REGISTRY }} - uses: docker/login-action@v3 + uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} @@ -266,14 +266,14 @@ jobs: # https://github.com/docker/metadata-action - name: Extract Docker metadata id: meta-bundle - uses: docker/metadata-action@v5 + uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0 with: images: "${{ env.GHCR_IMAGE }}-bundle" # Build and push Docker image bundle with Buildx - name: Build and push bundle image id: build-and-push-bundle - uses: docker/build-push-action@v6 + uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 with: context: . file: bundle.Dockerfile @@ -306,14 +306,14 @@ jobs: k8s-version: [v1.28.9, v1.29.4, v1.30.0] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 with: fetch-depth: 0 # fetch is needed for "git tag --list" in the Makefile - name: Import environment variables from file run: cat ".github/env" >> $GITHUB_ENV - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 with: go-version: "${{ env.golang-version }}" - name: Start minikube @@ -359,7 +359,7 @@ jobs: - name: Extract Docker metadata id: meta - uses: docker/metadata-action@v5 + uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0 with: images: ${{ env.GHCR_IMAGE }} @@ -373,14 +373,14 @@ jobs: operator-sdk cleanup mondoo-operator --namespace mondoo-operator operator-sdk olm uninstall - - uses: actions/upload-artifact@v4 # upload test results + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 if: success() || failure() # run this step even if previous step failed with: # upload a combined archive with unit and integration test results name: test-results-olm-${{ matrix.k8s-version }} path: integration-tests-olm-${{ matrix.k8s-version }}.xml - name: Upload test logs artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 if: failure() with: name: olm-test-logs-${{ matrix.k8s-version }} @@ -485,13 +485,13 @@ jobs: pull-requests: write # Required to write comments steps: - name: Download test results - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: pattern: test-results-* merge-multiple: true - name: Publish Test Results - uses: EnricoMi/publish-unit-test-result-action@v2 + uses: EnricoMi/publish-unit-test-result-action@3a74b2957438d0b6e2e61d67b05318aa25c9e6c6 # v2.20.0 with: commit: ${{ github.event.workflow_run.head_sha }} event_file: ${{ github.event_path }} @@ -509,7 +509,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 with: fetch-depth: 0 @@ -519,7 +519,7 @@ jobs: git config user.email "$GITHUB_ACTOR@users.noreply.github.com" - name: Install Helm - uses: azure/setup-helm@v4 + uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4.3.1 with: token: ${{ secrets.GITHUB_TOKEN }} id: install diff --git a/.github/workflows/release-manifests.yaml b/.github/workflows/release-manifests.yaml index 1a54cc9f1..3321f1861 100644 --- a/.github/workflows/release-manifests.yaml +++ b/.github/workflows/release-manifests.yaml @@ -15,17 +15,17 @@ jobs: runs-on: ubuntu-latest name: Generate manifests steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - name: Import environment variables from file run: cat ".github/env" >> $GITHUB_ENV - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 with: go-version: "${{ env.golang-version }}" - name: Generate manifests run: make generate-manifests IMG='${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.RELEASE }}' - name: Release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@6cbd405e2c4e67a21c47fa9e383d020e4e28b836 # v2.3.3 with: files: mondoo-operator-manifests.yaml generate_release_notes: true diff --git a/.github/workflows/security-tests.yaml b/.github/workflows/security-tests.yaml index 3d954078c..e777782c7 100644 --- a/.github/workflows/security-tests.yaml +++ b/.github/workflows/security-tests.yaml @@ -21,14 +21,14 @@ jobs: IMAGE_NAME: ${{ github.repository }} RELEASE: ${{ github.ref_name }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 with: ref: ${{ github.event.pull_request.head.sha }} persist-credentials: false - name: Import environment variables from file run: cat ".github/env" >> $GITHUB_ENV - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 with: go-version: ">=${{ env.golang-version }}" cache: false diff --git a/.github/workflows/spell-check.yaml b/.github/workflows/spell-check.yaml index 888a4f1aa..4d37b44a6 100644 --- a/.github/workflows/spell-check.yaml +++ b/.github/workflows/spell-check.yaml @@ -23,7 +23,7 @@ jobs: steps: - name: check-spelling id: spelling - uses: check-spelling/check-spelling@v0.0.25 + uses: check-spelling/check-spelling@c635c2f3f714eec2fcf27b643a1919b9a811ef2e # v0.0.25 with: disable_checks: noisy-file suppress_push_for_open_pull_request: 1 @@ -48,7 +48,7 @@ jobs: if: (success() || failure()) && needs.spelling.outputs.followup steps: - name: comment - uses: check-spelling/check-spelling@v0.0.25 + uses: check-spelling/check-spelling@c635c2f3f714eec2fcf27b643a1919b9a811ef2e # v0.0.25 with: checkout: true task: ${{ needs.spelling.outputs.followup }} diff --git a/.github/workflows/test-report.yaml b/.github/workflows/test-report.yaml index 83f7f516d..f1525025d 100644 --- a/.github/workflows/test-report.yaml +++ b/.github/workflows/test-report.yaml @@ -14,15 +14,15 @@ jobs: runs-on: ubuntu-latest steps: - name: Download and Extract Artifacts - uses: dawidd6/action-download-artifact@v11 + uses: dawidd6/action-download-artifact@ac66b43f0e6a346234dd65d4d0c8fbb31cb316e5 # v11 with: run_id: ${{ github.event.workflow_run.id }} path: artifacts - name: Publish Test Results - uses: EnricoMi/publish-unit-test-result-action@v2 + uses: EnricoMi/publish-unit-test-result-action@3a74b2957438d0b6e2e61d67b05318aa25c9e6c6 # v2.20.0 with: commit: ${{ github.event.workflow_run.head_sha }} event_file: artifacts/Event File/event.json event_name: ${{ github.event.workflow_run.event }} - files: "artifacts/**/*.xml" \ No newline at end of file + files: "artifacts/**/*.xml" diff --git a/.github/workflows/tests-forks.yaml b/.github/workflows/tests-forks.yaml index 35f361308..ec7e3aaef 100644 --- a/.github/workflows/tests-forks.yaml +++ b/.github/workflows/tests-forks.yaml @@ -21,7 +21,7 @@ jobs: issues: write pull-requests: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 with: persist-credentials: false - name: remove labels @@ -35,7 +35,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Upload - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: Event File path: ${{ github.event_path }} @@ -57,4 +57,4 @@ jobs: uses: ./.github/workflows/integration-tests.yaml with: cnspecImageTag: "" - secrets: inherit \ No newline at end of file + secrets: inherit diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml index 1147f6717..6687d41d9 100644 --- a/.github/workflows/tests.yaml +++ b/.github/workflows/tests.yaml @@ -20,7 +20,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Upload - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: Event File path: ${{ github.event_path }} @@ -42,4 +42,4 @@ jobs: uses: ./.github/workflows/integration-tests.yaml with: cnspecImageTag: "" - secrets: inherit \ No newline at end of file + secrets: inherit diff --git a/.github/workflows/unit-tests.yaml b/.github/workflows/unit-tests.yaml index 14c5cded4..6dcfa7c05 100644 --- a/.github/workflows/unit-tests.yaml +++ b/.github/workflows/unit-tests.yaml @@ -12,21 +12,21 @@ jobs: runs-on: ubuntu-latest name: Unit tests steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 with: ref: ${{ github.event.pull_request.head.sha }} persist-credentials: false - name: Import environment variables from file run: cat ".github/env" >> $GITHUB_ENV - - uses: actions/setup-go@v5 + - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 with: go-version: "${{ env.golang-version }}" cache: true - run: make test/ci - - uses: actions/upload-artifact@v4 # upload test results + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 if: success() || failure() # run this step even if previous step failed with: name: test-results-unit path: unit-tests.xml - \ No newline at end of file + From cec5aa32d3371dc38a892eed925d65f3383214f4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 29 Sep 2025 09:22:52 +0000 Subject: [PATCH 12/20] Bump google-github-actions/setup-gcloud from 2.2.1 to 3.0.1 (#1263) --- .github/workflows/cnspec.yaml | 2 +- .github/workflows/publish.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/cnspec.yaml b/.github/workflows/cnspec.yaml index d1c6a1599..d53e87010 100644 --- a/.github/workflows/cnspec.yaml +++ b/.github/workflows/cnspec.yaml @@ -62,7 +62,7 @@ jobs: credentials_json: "${{ secrets.GCP_ARTIFACT_REGISTRY_SA }}" - name: "Set up Cloud SDK" - uses: "google-github-actions/setup-gcloud@e427ad8a34f8676edf47cf7d7925499adf3eb74f" # v2.2.1 + uses: "google-github-actions/setup-gcloud@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db" # v3.0.1 - name: Docker Login (GCR) run: | diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 37f5f330f..103606e6b 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -74,7 +74,7 @@ jobs: credentials_json: "${{ secrets.GCP_ARTIFACT_REGISTRY_SA }}" - name: "Set up Cloud SDK" - uses: "google-github-actions/setup-gcloud@e427ad8a34f8676edf47cf7d7925499adf3eb74f" # v2.2.1 + uses: "google-github-actions/setup-gcloud@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db" # v3.0.1 - name: Docker Login (GCR) run: | @@ -181,7 +181,7 @@ jobs: credentials_json: "${{ secrets.GCP_ARTIFACT_REGISTRY_SA }}" - name: "Set up Cloud SDK" - uses: "google-github-actions/setup-gcloud@e427ad8a34f8676edf47cf7d7925499adf3eb74f" # v2.2.1 + uses: "google-github-actions/setup-gcloud@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db" # v3.0.1 - name: Docker Login (GCR) run: | From d82f6daa8234da15333e92730ae61dba47152194 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 8 Oct 2025 07:04:02 +0000 Subject: [PATCH 13/20] Bump sigstore/cosign-installer from 3.9.1 to 3.10.0 (#1268) --- .github/workflows/publish.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 103606e6b..35fb943c8 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -57,7 +57,7 @@ jobs: # Install the cosign tool except on PR # https://github.com/sigstore/cosign-installer - name: Install cosign - uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1 + uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 # v3.10.0 # Login against a Docker registry except on PR # https://github.com/docker/login-action @@ -164,7 +164,7 @@ jobs: # Install the cosign tool except on PR # https://github.com/sigstore/cosign-installer - name: Install cosign - uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1 + uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 # v3.10.0 # Login against a Docker registry except on PR # https://github.com/docker/login-action @@ -226,7 +226,7 @@ jobs: # Install the cosign tool except on PR # https://github.com/sigstore/cosign-installer - name: Install cosign - uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1 + uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 # v3.10.0 - name: Set up QEMU uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0 From 982e6b8c3eae2e99398e00ed1b49147e263523e5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 8 Oct 2025 07:04:20 +0000 Subject: [PATCH 14/20] Bump google-github-actions/auth from 2.1.13 to 3.0.0 (#1267) --- .github/workflows/cnspec.yaml | 2 +- .github/workflows/publish.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/cnspec.yaml b/.github/workflows/cnspec.yaml index d53e87010..a1b93376c 100644 --- a/.github/workflows/cnspec.yaml +++ b/.github/workflows/cnspec.yaml @@ -57,7 +57,7 @@ jobs: password: ${{ secrets.GITHUB_TOKEN }} - name: Authenticate with Google Cloud - uses: "google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed" # v2.1.13 + uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # v3.0.0 with: credentials_json: "${{ secrets.GCP_ARTIFACT_REGISTRY_SA }}" diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 35fb943c8..b34b5c9d3 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -69,7 +69,7 @@ jobs: password: ${{ secrets.GITHUB_TOKEN }} - name: Authenticate with Google Cloud - uses: "google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed" # v2.1.13 + uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # v3.0.0 with: credentials_json: "${{ secrets.GCP_ARTIFACT_REGISTRY_SA }}" @@ -176,7 +176,7 @@ jobs: password: ${{ secrets.GITHUB_TOKEN }} - name: Authenticate with Google Cloud - uses: "google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed" # v2.1.13 + uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # v3.0.0 with: credentials_json: "${{ secrets.GCP_ARTIFACT_REGISTRY_SA }}" From 053e1b03f51dd08e87f42bc4f6137d6f65ea2449 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 8 Oct 2025 07:04:53 +0000 Subject: [PATCH 15/20] Bump actions/checkout from 4.3.0 to 5.0.0 (#1264) --- .github/workflows/cloud-tests.yaml | 6 +++--- .github/workflows/cnspec.yaml | 2 +- .github/workflows/integration-tests.yaml | 2 +- .github/workflows/leftover-spaces-cleaner.yaml | 2 +- .github/workflows/lint.yaml | 4 ++-- .github/workflows/publish-images.yaml | 2 +- .github/workflows/publish.yaml | 10 +++++----- .github/workflows/release-manifests.yaml | 2 +- .github/workflows/security-tests.yaml | 2 +- .github/workflows/tests-forks.yaml | 2 +- .github/workflows/unit-tests.yaml | 2 +- 11 files changed, 18 insertions(+), 18 deletions(-) diff --git a/.github/workflows/cloud-tests.yaml b/.github/workflows/cloud-tests.yaml index 752863c09..0c3e92d35 100644 --- a/.github/workflows/cloud-tests.yaml +++ b/.github/workflows/cloud-tests.yaml @@ -55,7 +55,7 @@ jobs: k8s-version: ["1.27", "1.28", "1.29"] steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: fetch-depth: 0 # fetch is needed for "git tag --list" in the Makefile @@ -138,7 +138,7 @@ jobs: AWS_REGION: us-east-2 steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: fetch-depth: 0 # fetch is needed for "git tag --list" in the Makefile @@ -215,7 +215,7 @@ jobs: KUBECONFIG: ${{ format('{0}/{1}', github.workspace, '.github/terraform/gke/kubeconfig') }} steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: fetch-depth: 0 # fetch is needed for "git tag --list" in the Makefile diff --git a/.github/workflows/cnspec.yaml b/.github/workflows/cnspec.yaml index a1b93376c..06ec2240c 100644 --- a/.github/workflows/cnspec.yaml +++ b/.github/workflows/cnspec.yaml @@ -31,7 +31,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Sanitize version input (Workflow Dispatch) if: github.event_name == 'workflow_dispatch' diff --git a/.github/workflows/integration-tests.yaml b/.github/workflows/integration-tests.yaml index 3ccb4a65f..e4a97b7c2 100644 --- a/.github/workflows/integration-tests.yaml +++ b/.github/workflows/integration-tests.yaml @@ -30,7 +30,7 @@ jobs: k8s-distro: [minikube, k3d] steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: ref: ${{ github.event.pull_request.head.sha }} persist-credentials: false diff --git a/.github/workflows/leftover-spaces-cleaner.yaml b/.github/workflows/leftover-spaces-cleaner.yaml index 3d247dafa..c9034cf7e 100644 --- a/.github/workflows/leftover-spaces-cleaner.yaml +++ b/.github/workflows/leftover-spaces-cleaner.yaml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-latest name: Leftover spaces cleanup steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Set up Go uses: actions/setup-go@19bb51245e9c80abacb2e91cc42b33fa478b8639 # v4.2.1 diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index 3d8e67897..3328e09ec 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -16,7 +16,7 @@ jobs: - uses: GitHubSecurityLab/actions-permissions/monitor@37c927c24552caa0ef6040ab0876db729cc12754 # v1.0.2-beta7 with: config: ${{ vars.PERMISSIONS_CONFIG }} - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Import environment variables from file run: cat ".github/env" >> $GITHUB_ENV - name: Install Go @@ -34,7 +34,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Setup Copywrite uses: hashicorp/setup-copywrite@32638da2d4e81d56a0764aa1547882fc4d209636 # v1.1.3 diff --git a/.github/workflows/publish-images.yaml b/.github/workflows/publish-images.yaml index fea8afa81..6b15c332f 100644 --- a/.github/workflows/publish-images.yaml +++ b/.github/workflows/publish-images.yaml @@ -30,7 +30,7 @@ jobs: arch: [amd64, arm64, arm] steps: - name: Checkout repository - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Import environment variables from file run: cat ".github/env" >> $GITHUB_ENV diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index b34b5c9d3..ce4803ad6 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -44,7 +44,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Import environment variables from file run: cat ".github/env" >> $GITHUB_ENV @@ -159,7 +159,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 # Install the cosign tool except on PR # https://github.com/sigstore/cosign-installer @@ -215,7 +215,7 @@ jobs: # with sigstore/fulcio when running outside of PRs. id-token: write steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Import environment variables from file run: cat ".github/env" >> $GITHUB_ENV - name: Install Go @@ -306,7 +306,7 @@ jobs: k8s-version: [v1.28.9, v1.29.4, v1.30.0] steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: fetch-depth: 0 # fetch is needed for "git tag --list" in the Makefile - name: Import environment variables from file @@ -509,7 +509,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: fetch-depth: 0 diff --git a/.github/workflows/release-manifests.yaml b/.github/workflows/release-manifests.yaml index 3321f1861..5bf4dbb71 100644 --- a/.github/workflows/release-manifests.yaml +++ b/.github/workflows/release-manifests.yaml @@ -15,7 +15,7 @@ jobs: runs-on: ubuntu-latest name: Generate manifests steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Import environment variables from file run: cat ".github/env" >> $GITHUB_ENV - name: Install Go diff --git a/.github/workflows/security-tests.yaml b/.github/workflows/security-tests.yaml index e777782c7..985c48f39 100644 --- a/.github/workflows/security-tests.yaml +++ b/.github/workflows/security-tests.yaml @@ -21,7 +21,7 @@ jobs: IMAGE_NAME: ${{ github.repository }} RELEASE: ${{ github.ref_name }} steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: ref: ${{ github.event.pull_request.head.sha }} persist-credentials: false diff --git a/.github/workflows/tests-forks.yaml b/.github/workflows/tests-forks.yaml index ec7e3aaef..dfa76cbb5 100644 --- a/.github/workflows/tests-forks.yaml +++ b/.github/workflows/tests-forks.yaml @@ -21,7 +21,7 @@ jobs: issues: write pull-requests: write steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: persist-credentials: false - name: remove labels diff --git a/.github/workflows/unit-tests.yaml b/.github/workflows/unit-tests.yaml index 6dcfa7c05..dff72fadb 100644 --- a/.github/workflows/unit-tests.yaml +++ b/.github/workflows/unit-tests.yaml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest name: Unit tests steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: ref: ${{ github.event.pull_request.head.sha }} persist-credentials: false From cf58c2bf2e06d4a82b5cc01f24cf6e72a699a0f5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 19 Oct 2025 22:26:10 -0700 Subject: [PATCH 16/20] Bump docker/login-action from 3.5.0 to 3.6.0 (#1271) Bumps [docker/login-action](https://github.com/docker/login-action) from 3.5.0 to 3.6.0. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/184bdaa0721073962dff0199f1fb9940f07167d1...5e57cd118135c172c3672efd75eb46360885c0ef) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/cnspec.yaml | 2 +- .github/workflows/publish.yaml | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/cnspec.yaml b/.github/workflows/cnspec.yaml index 06ec2240c..1d0010645 100644 --- a/.github/workflows/cnspec.yaml +++ b/.github/workflows/cnspec.yaml @@ -50,7 +50,7 @@ jobs: uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1 - name: Log into registry ghcr.io - uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0 + uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0 with: registry: ghcr.io username: ${{ github.actor }} diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index ce4803ad6..4bc0be996 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -62,7 +62,7 @@ jobs: # Login against a Docker registry except on PR # https://github.com/docker/login-action - name: Log into registry ${{ env.REGISTRY }} - uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0 + uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} @@ -169,7 +169,7 @@ jobs: # Login against a Docker registry except on PR # https://github.com/docker/login-action - name: Log into registry ${{ env.REGISTRY }} - uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0 + uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} @@ -241,7 +241,7 @@ jobs: # Login against a Docker registry except on PR # https://github.com/docker/login-action - name: Log into registry ${{ env.REGISTRY }} - uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0 + uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} From 5c6bb0806004d7c7fdd41ccbfafdb97e35df038a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 19 Oct 2025 22:26:43 -0700 Subject: [PATCH 17/20] Bump softprops/action-gh-release from 2.3.3 to 2.4.1 (#1272) Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.3.3 to 2.4.1. - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/6cbd405e2c4e67a21c47fa9e383d020e4e28b836...6da8fa9354ddfdc4aeace5fc48d7f679b5214090) --- updated-dependencies: - dependency-name: softprops/action-gh-release dependency-version: 2.4.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/release-manifests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release-manifests.yaml b/.github/workflows/release-manifests.yaml index 5bf4dbb71..2884ef355 100644 --- a/.github/workflows/release-manifests.yaml +++ b/.github/workflows/release-manifests.yaml @@ -25,7 +25,7 @@ jobs: - name: Generate manifests run: make generate-manifests IMG='${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.RELEASE }}' - name: Release - uses: softprops/action-gh-release@6cbd405e2c4e67a21c47fa9e383d020e4e28b836 # v2.3.3 + uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2.4.1 with: files: mondoo-operator-manifests.yaml generate_release_notes: true From be5a954966b247f3807509a46ad7c48943c04670 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 19 Oct 2025 22:27:15 -0700 Subject: [PATCH 18/20] Bump actions/download-artifact from 4.3.0 to 5.0.0 (#1265) Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4.3.0 to 5.0.0. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/d3f86a106a0bac45b974a628896c90dbdf5c8093...634f93cb2916e3fdff6788551b99b062d0335ce0) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/cloud-tests.yaml | 2 +- .github/workflows/publish.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/cloud-tests.yaml b/.github/workflows/cloud-tests.yaml index 0c3e92d35..e4c0545d0 100644 --- a/.github/workflows/cloud-tests.yaml +++ b/.github/workflows/cloud-tests.yaml @@ -292,7 +292,7 @@ jobs: if: always() steps: - name: Download test results - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0 with: pattern: cloud-test-results-* merge-multiple: true diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 4bc0be996..603b7aeac 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -485,7 +485,7 @@ jobs: pull-requests: write # Required to write comments steps: - name: Download test results - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0 with: pattern: test-results-* merge-multiple: true From df3ae5302e949b5fe069b3a98702899fcef69ac1 Mon Sep 17 00:00:00 2001 From: Christian Zunker <827818+czunker@users.noreply.github.com> Date: Mon, 20 Oct 2025 07:28:04 +0200 Subject: [PATCH 19/20] =?UTF-8?q?=F0=9F=A7=B9=20Bump=20k8s=20versions=20fo?= =?UTF-8?q?r=20tests=20(#1269)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Christian Zunker --- .github/workflows/integration-tests.yaml | 6 +++--- .github/workflows/publish.yaml | 18 +++++++++--------- 2 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/workflows/integration-tests.yaml b/.github/workflows/integration-tests.yaml index e4a97b7c2..5a7f455bb 100644 --- a/.github/workflows/integration-tests.yaml +++ b/.github/workflows/integration-tests.yaml @@ -26,7 +26,7 @@ jobs: strategy: fail-fast: false matrix: - k8s-version: [v1.28.9, v1.29.4] #v1.30.0] k3d doesn't support 1.30 yet + k8s-version: [v1.31.9, v1.32.9, v1.33.5, v1.34.1] k8s-distro: [minikube, k3d] steps: @@ -77,8 +77,8 @@ jobs: if: success() || failure() - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 - if: success() || failure() # run this step even if previous step failed - with: # upload a combined archive with unit and integration test results + if: success() || failure() # run this step even if previous step failed + with: # upload a combined archive with unit and integration test results name: test-results-${{ matrix.k8s-distro }}-${{ matrix.k8s-version }} path: integration-tests-${{ matrix.k8s-distro }}-${{ matrix.k8s-version }}.xml diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 603b7aeac..16443e313 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -16,7 +16,7 @@ on: env: REGISTRY: ghcr.io GHCR_IMAGE: ghcr.io/${{ github.repository }} - GCP_IMAGE: us-docker.pkg.dev/mondoohq/release/mondoo-operator + GCP_IMAGE: us-docker.pkg.dev/mondoohq/release/mondoo-operator RELEASE: ${{ github.ref_name }} jobs: @@ -303,7 +303,7 @@ jobs: strategy: fail-fast: false matrix: - k8s-version: [v1.28.9, v1.29.4, v1.30.0] + k8s-version: [v1.31.9, v1.32.9, v1.33.5, v1.34.1] steps: - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 @@ -374,8 +374,8 @@ jobs: operator-sdk olm uninstall - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 - if: success() || failure() # run this step even if previous step failed - with: # upload a combined archive with unit and integration test results + if: success() || failure() # run this step even if previous step failed + with: # upload a combined archive with unit and integration test results name: test-results-olm-${{ matrix.k8s-version }} path: integration-tests-olm-${{ matrix.k8s-version }}.xml @@ -392,7 +392,7 @@ jobs: uses: ./.github/workflows/release-manifests.yaml needs: - push-virtual-tag -# this should ensure the manifest is tagged latest, which is required for the install automation + # this should ensure the manifest is tagged latest, which is required for the install automation - release-helm # publish helm chart after the release of container images is complete @@ -479,9 +479,9 @@ jobs: - run-olm-e2e #- run-helm-tests permissions: - actions: read # Required to read the artifact - contents: read # Required to read the source - checks: write # Required to write the results + actions: read # Required to read the artifact + contents: read # Required to read the source + checks: write # Required to write the results pull-requests: write # Required to write comments steps: - name: Download test results @@ -501,7 +501,7 @@ jobs: release-helm: name: Release helm chart needs: - - push-virtual-tag + - push-virtual-tag runs-on: ubuntu-latest permissions: From 638d2e1a6d045754b42e04cc3a9483ea4a929841 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 21 Oct 2025 12:59:13 +0000 Subject: [PATCH 20/20] Bump actions/setup-go from 4.2.1 to 6.0.0 (#1270) --- .github/workflows/cloud-tests.yaml | 6 +++--- .github/workflows/integration-tests.yaml | 2 +- .github/workflows/leftover-spaces-cleaner.yaml | 2 +- .github/workflows/lint.yaml | 2 +- .github/workflows/publish.yaml | 6 +++--- .github/workflows/release-manifests.yaml | 2 +- .github/workflows/security-tests.yaml | 2 +- .github/workflows/unit-tests.yaml | 2 +- 8 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/workflows/cloud-tests.yaml b/.github/workflows/cloud-tests.yaml index e4c0545d0..2b2037ef0 100644 --- a/.github/workflows/cloud-tests.yaml +++ b/.github/workflows/cloud-tests.yaml @@ -81,7 +81,7 @@ jobs: TF_VAR_k8s_version: ${{ matrix.k8s-version }} working-directory: .github/terraform/aks - - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 + - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: go-version: "${{ env.golang-version }}" cache: true @@ -163,7 +163,7 @@ jobs: TF_VAR_kubernetes_version: ${{ matrix.k8s-version }} working-directory: .github/terraform/aws - - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 + - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: go-version: "${{ env.golang-version }}" cache: true @@ -243,7 +243,7 @@ jobs: TF_VAR_k8s_version: ${{ matrix.k8s-version }} working-directory: .github/terraform/gke - - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 + - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: go-version: "${{ env.golang-version }}" cache: true diff --git a/.github/workflows/integration-tests.yaml b/.github/workflows/integration-tests.yaml index 5a7f455bb..f44ae49ad 100644 --- a/.github/workflows/integration-tests.yaml +++ b/.github/workflows/integration-tests.yaml @@ -52,7 +52,7 @@ jobs: version: ${{ matrix.k8s-version }} k3d-args: --k3s-arg=--disable=traefik@server:* - - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 + - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: go-version: "${{ env.golang-version }}" diff --git a/.github/workflows/leftover-spaces-cleaner.yaml b/.github/workflows/leftover-spaces-cleaner.yaml index c9034cf7e..d683102f0 100644 --- a/.github/workflows/leftover-spaces-cleaner.yaml +++ b/.github/workflows/leftover-spaces-cleaner.yaml @@ -13,7 +13,7 @@ jobs: - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Set up Go - uses: actions/setup-go@19bb51245e9c80abacb2e91cc42b33fa478b8639 # v4.2.1 + uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: go-version: '1.24' diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index 3328e09ec..e37d2c300 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -20,7 +20,7 @@ jobs: - name: Import environment variables from file run: cat ".github/env" >> $GITHUB_ENV - name: Install Go - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 + uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: go-version: ">=${{ env.golang-version }}" cache: false diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 16443e313..3cc61e708 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -49,7 +49,7 @@ jobs: - name: Import environment variables from file run: cat ".github/env" >> $GITHUB_ENV - - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 + - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: go-version: "${{ env.golang-version }}" cache: true @@ -219,7 +219,7 @@ jobs: - name: Import environment variables from file run: cat ".github/env" >> $GITHUB_ENV - name: Install Go - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 + uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: go-version: "${{ env.golang-version }}" @@ -313,7 +313,7 @@ jobs: run: cat ".github/env" >> $GITHUB_ENV - name: Install Go - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 + uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: go-version: "${{ env.golang-version }}" - name: Start minikube diff --git a/.github/workflows/release-manifests.yaml b/.github/workflows/release-manifests.yaml index 2884ef355..0089bd7ba 100644 --- a/.github/workflows/release-manifests.yaml +++ b/.github/workflows/release-manifests.yaml @@ -19,7 +19,7 @@ jobs: - name: Import environment variables from file run: cat ".github/env" >> $GITHUB_ENV - name: Install Go - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 + uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: go-version: "${{ env.golang-version }}" - name: Generate manifests diff --git a/.github/workflows/security-tests.yaml b/.github/workflows/security-tests.yaml index 985c48f39..f93336854 100644 --- a/.github/workflows/security-tests.yaml +++ b/.github/workflows/security-tests.yaml @@ -28,7 +28,7 @@ jobs: - name: Import environment variables from file run: cat ".github/env" >> $GITHUB_ENV - name: Install Go - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 + uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: go-version: ">=${{ env.golang-version }}" cache: false diff --git a/.github/workflows/unit-tests.yaml b/.github/workflows/unit-tests.yaml index dff72fadb..6eb3a7488 100644 --- a/.github/workflows/unit-tests.yaml +++ b/.github/workflows/unit-tests.yaml @@ -18,7 +18,7 @@ jobs: persist-credentials: false - name: Import environment variables from file run: cat ".github/env" >> $GITHUB_ENV - - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 + - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: go-version: "${{ env.golang-version }}" cache: true