Skip to content

[main]CI improvements #884

Merged
Abhishek-Valaboju merged 1 commit into
rancher:mainfrom
Abhishek-Valaboju:security-fix-main
Mar 31, 2026
Merged

[main]CI improvements #884
Abhishek-Valaboju merged 1 commit into
rancher:mainfrom
Abhishek-Valaboju:security-fix-main

Conversation

@Abhishek-Valaboju
Copy link
Copy Markdown
Contributor

@Abhishek-Valaboju Abhishek-Valaboju commented Mar 30, 2026

CI Improvements

Changes

  1. Added SUM_amd64/SUM_arm64 checksum variables for all dependencies (golangci-lint, k3d, kubectl, helm)
  2. Replaced curl | bash installer scripts with direct binary downloads from pinned GitHub releases + sha256 verification
  3. Replaced live checksum fetching with hardcoded values verified at build time

@Abhishek-Valaboju Abhishek-Valaboju force-pushed the security-fix-main branch 2 times, most recently from 3972194 to 96597a5 Compare March 30, 2026 11:09
Comment thread hack/make/tools.mk Outdated
Comment thread hack/make/deps.mk
@Abhishek-Valaboju Abhishek-Valaboju force-pushed the security-fix-main branch 2 times, most recently from 61857c6 to 9e2c237 Compare March 30, 2026 13:32
@Abhishek-Valaboju Abhishek-Valaboju marked this pull request as ready for review March 31, 2026 05:17
@Abhishek-Valaboju Abhishek-Valaboju requested review from a team as code owners March 31, 2026 05:17
Comment thread hack/make/deps.mk Outdated
@andypitcher
Copy link
Copy Markdown
Contributor

Approving, would be good to also pin Dockerfile images.

@Abhishek-Valaboju Abhishek-Valaboju merged commit 1f327ac into rancher:main Mar 31, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants