Evans Mungai
5dabfdfb3f
Merge remote-tracking branch 'origin/main' into em/check-go-modules
...
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
12 months ago
Terry Howe
77bbbbd84f
feature: add stale pr workflow
...
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
1 year ago
Terry Howe
d918f919e0
fix: stale issue workflow
...
Signed-off-by: Terry Howe <terrylhowe@gmail.com>
1 year ago
Evans Mungai
6752b5e4c3
Merge branch 'main' into em/check-go-modules
...
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
1 year ago
dependabot[bot]
78436b2d0e
chore(deps): bump actions/checkout from 4.2.2 to 5.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.2.2 to 5.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](11bd71901b...08c6903cd8 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
1 year ago
Evans Mungai
af1c9570f5
Rename go mod tidy check task
...
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
1 year ago
Evans Mungai
0dae3d6e88
chore: check if go modules are tidy before build
...
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
1 year ago
Robert Sirchia
8e69436435
Merge pull request #30912 from Bhargavkonidena/fix_30893
...
Fix #30893 - issue templates
1 year ago
Bhargavkonidena
a5084dc0a7
Update bug-report.yaml
...
Signed-off-by: Bhargavkonidena <Bhargavkonidena@users.noreply.github.com>
1 year ago
Bhargavkonidena
b9008b2caa
Update bug-report.yaml
...
Signed-off-by: Bhargavkonidena <Bhargavkonidena@users.noreply.github.com>
1 year ago
Bhargavkonidena
210e29d489
Update bug-report.yaml
...
Signed-off-by: Bhargavkonidena <Bhargavkonidena@users.noreply.github.com>
1 year ago
Bhargavkonidena
372dc30368
Incorporated review comments
...
Signed-off-by: Bhargavkonidena <Bhargavkonidena@users.noreply.github.com>
1 year ago
dependabot[bot]
8706c441c4
build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.4.1 to 2.4.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](f49aabe0b5...05b42c6244 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-version: 2.4.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
1 year ago
Bhargavkonidena
94318741e5
Update and rename documentation.md to documentation.yaml
...
Signed-off-by: Bhargavkonidena <Bhargavkonidena@users.noreply.github.com>
1 year ago
Bhargavkonidena
ca89ae2d7a
Update and rename feature.md to feature.yaml
...
Signed-off-by: Bhargavkonidena <Bhargavkonidena@users.noreply.github.com>
1 year ago
Bhargavkonidena
03d8e1eaf2
Update and rename bug.md to bug-report.yaml
...
Signed-off-by: Bhargavkonidena <Bhargavkonidena@users.noreply.github.com>
1 year ago
Bhargavkonidena
fcef313197
Delete .github/issue_template.md
...
Signed-off-by: Bhargavkonidena <Bhargavkonidena@users.noreply.github.com>
1 year ago
Bhargavkonidena
61e313908f
Added issue templates for documentation & features
...
Signed-off-by: Bhargavkonidena <Bhargavkonidena@users.noreply.github.com>
1 year ago
Bhargavkonidena
ab5084e066
Create bug.md
...
Signed-off-by: Bhargavkonidena <Bhargavkonidena@users.noreply.github.com>
1 year ago
Robert Sirchia
b4bc0f1d88
Merge pull request #30872 from benoittgt/fix-30838
...
Bump golangci-lint version to match last golangci-lint-action
1 year ago
Benoit Tigeot
a418064a3d
Bump golangci lint to match golangci-lint Github Action version
...
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
1 year ago
dependabot[bot]
7ab768abc0
build(deps): bump actions/setup-go from 5.4.0 to 5.5.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.4.0 to 5.5.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](0aaccfd150...d35c59abb0 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 5.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
1 year ago
dependabot[bot]
c3b83c3c40
build(deps): bump golangci/golangci-lint-action from 7.0.0 to 8.0.0
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 7.0.0 to 8.0.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](1481404843...4afd733a84 )
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-version: 8.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
1 year ago
Matthieu MOREL
a0c84b9246
fix: govulncheck workflow
...
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
1 year ago
dongjiang
5cb8335c4d
Update .github/env
...
Signed-off-by: dongjiang <dongjiang2010@gmail.com>
1 year ago
dongjiang
cd19e2a015
Merge branch 'main' into update-golang-version
...
Signed-off-by: dongjiang <dongjiang2010@gmail.com>
1 year ago
Benoit Tigeot
18ed1cf720
Migrate to last golangci-lint and golangci-lint-action
...
Close dependabot https://github.com/helm/helm/pull/30706
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
1 year ago
dongjiang
fcc9468b60
fix comments
...
Signed-off-by: dongjiang <dongjiang1989@126.com>
1 year ago
Robert Sirchia
a5ec16357d
Merge pull request #30688 from helm/dependabot/github_actions/main/actions/setup-go-5.4.0
...
build(deps): bump actions/setup-go from 5.3.0 to 5.4.0
1 year ago
dependabot[bot]
f95410f66c
build(deps): bump actions/setup-go from 5.3.0 to 5.4.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.3.0 to 5.4.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](f111f3307d...0aaccfd150 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
1 year ago
dependabot[bot]
a45cf1bab9
build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.6.1 to 4.6.2.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](4cec3d8aa0...ea165f8d65 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
1 year ago
dongjiang
f8e85bf172
change environment varialbe names
...
Signed-off-by: dongjiang <dongjiang1989@126.com>
1 year ago
dependabot[bot]
d5d75ad0c7
build(deps): bump golangci/golangci-lint-action from 6.5.1 to 6.5.2
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6.5.1 to 6.5.2.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](4696ba8bab...55c2c1448f )
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
1 year ago
dongjiang
af5f730a16
add golangci-lint-version
...
Signed-off-by: dongjiang <dongjiang1989@126.com>
1 year ago
dongjiang
068a892d27
fix codereview bug
...
Signed-off-by: dongjiang <dongjiang1989@126.com>
1 year ago
dongjiang
b1000ba5d7
update golang to v1.24
...
Signed-off-by: dongjiang <dongjiang1989@126.com>
1 year ago
dependabot[bot]
fd547184f1
build(deps): bump golangci/golangci-lint-action from 6.5.0 to 6.5.1
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6.5.0 to 6.5.1.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](2226d7cb06...4696ba8bab )
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
1 year ago
George Jenkins
a0c281c14d
Merge pull request #30568 from helm/dependabot/github_actions/main/ossf/scorecard-action-2.4.1
...
build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1
1 year ago
dependabot[bot]
3d35e786c7
build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.6.0 to 4.6.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](65c4c4a1dd...4cec3d8aa0 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
1 year ago
dependabot[bot]
5c648151d5
build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](62b2cac7ed...f49aabe0b5 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
1 year ago
dependabot[bot]
50be8ae64b
build(deps): bump golangci/golangci-lint-action from 6.3.2 to 6.5.0
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6.3.2 to 6.5.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](051d919338...2226d7cb06 )
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
9498994ab5
build(deps): bump golangci/golangci-lint-action from 6.3.0 to 6.3.2
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6.3.0 to 6.3.2.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](e60da84bfa...051d919338 )
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
5f64fe6663
build(deps): bump golangci/golangci-lint-action from 6.2.0 to 6.3.0
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6.2.0 to 6.3.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](ec5d18412c...e60da84bfa )
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Robert Sirchia
0d66425d9a
Merge pull request #13651 from helm/dependabot/github_actions/main/actions/setup-go-5.3.0
...
build(deps): bump actions/setup-go from 5.2.0 to 5.3.0
2 years ago
Matt Farina
093b9ee382
Merge pull request #13650 from helm/dependabot/github_actions/main/actions/stale-9.1.0
...
build(deps): bump actions/stale from 9.0.0 to 9.1.0
2 years ago
dependabot[bot]
5bf47fb21b
build(deps): bump actions/setup-go from 5.2.0 to 5.3.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.2.0 to 5.3.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](3041bf56c9...f111f3307d )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
b73c514a78
build(deps): bump actions/stale from 9.0.0 to 9.1.0
...
Bumps [actions/stale](https://github.com/actions/stale ) from 9.0.0 to 9.1.0.
- [Release notes](https://github.com/actions/stale/releases )
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md )
- [Commits](28ca103628...5bef64f19d )
---
updated-dependencies:
- dependency-name: actions/stale
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
d005334579
Bump golangci/golangci-lint-action from 6.1.1 to 6.2.0
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6.1.1 to 6.2.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](971e284b60...ec5d18412c )
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
ec12a61337
Bump actions/upload-artifact from 4.4.3 to 4.6.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.4.3 to 4.6.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](b4b15b8c7c...65c4c4a1dd )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Andrew Block
fb54996b00
Merge pull request #13489 from helm/dependabot/github_actions/actions/upload-artifact-4.4.3
...
Bump actions/upload-artifact from 3.2.1.pre.node20 to 4.4.3
2 years ago
George Jenkins
bfada38aa9
Run `build-test` action on `dev-v3` branch
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
2 years ago
George Jenkins
eee046f704
Fix `dependabot.yml`
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
2 years ago
Matt Farina
66f84e510e
Update golangci-lint version
...
Signed-off-by: Matt Farina <matt.farina@suse.com>
2 years ago
Matt Farina
5727f56a96
Update to Go 1.23
...
Multiple changes were made to pass linting. Some Go built-in names
are being used for variables (e.g., min). This happens in the Go
source itself including the Go standard library and is not always
a bad practice.
To handle allowing some built-in names to be used the linter config
is updated to allow (via opt-in) some names to pass. This allows us
to still check for re-use of Go built-in names and opt-in to any
new uses.
There were also several cases where a value was checked for nil
before checking its length when this is already handled by len()
or the types default value. These were cleaned up.
The license validation was updated because it was checking everything
in the .git directory including all remote content that was local.
The previous vendor directory was from a time prior to Go modules
when Helm handled dependencies differently. It was no longer needed.
Signed-off-by: Matt Farina <matt.farina@suse.com>
2 years ago
dependabot[bot]
08487907d9
Bump actions/setup-go from 5.1.0 to 5.2.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.1.0 to 5.2.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](41dfa10bad...3041bf56c9 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
George Jenkins
2cdc77a2ef
Dependabot update `dev-v3` branch go modules
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
2 years ago
George Jenkins
5202e67d26
Update .github/workflows/scorecards.yml
...
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
2 years ago
dependabot[bot]
caa8d322ee
Bump actions/upload-artifact from 3.2.1.pre.node20 to 4.4.3
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 3.2.1.pre.node20 to 4.4.3.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](c24449f33c...b4b15b8c7c )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Matt Farina
d1e9c022c6
Merge pull request #13332 from helm/dependabot/github_actions/actions/upload-artifact-c24449f33cd45d4826c6702db7e49f7cdb9b551d
...
Bump actions/upload-artifact from 97a0fba1372883ab732affbe8f94b823f91727db to c24449f33cd45d4826c6702db7e49f7cdb9b551d
2 years ago
George Jenkins
1baef77c44
Update .github/workflows/scorecards.yml
...
Co-authored-by: Terry Howe <terrylhowe@gmail.com>
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
2 years ago
Matt Farina
b5a83ea821
Adding CI for dev-v3 branch
...
When the main branch is for Helm v4, the dev-v3 branch is for Helm v3.
Note, the canary release is setup for helm v4 once the v3 branch is created
and there is no canary release for v3.
Signed-off-by: Matt Farina <matt.farina@suse.com>
2 years ago
Matt Farina
261233caec
Merge pull request #12620 from helm/dependabot/github_actions/actions/stale-9.0.0
...
chore(deps): bump actions/stale from 3.0.14 to 9.0.0
2 years ago
Matt Farina
029e983241
Increasing the size of the runner used for releases.
...
Note, this runner is provided as part of the CNCF access to GitHub
Enterprise runners.
Signed-off-by: Matt Farina <matt.farina@suse.com>
2 years ago
dependabot[bot]
f983342597
Bump actions/checkout from 4.2.1 to 4.2.2
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.2.1 to 4.2.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](eef61447b9...11bd71901b )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
c867af8e11
Bump actions/setup-go from 5.0.2 to 5.1.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.0.2 to 5.1.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](0a12ed9d6a...41dfa10bad )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
140a376539
chore(deps): bump actions/stale from 3.0.14 to 9.0.0
...
Bumps [actions/stale](https://github.com/actions/stale ) from 3.0.14 to 9.0.0.
- [Release notes](https://github.com/actions/stale/releases )
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/stale/compare/v3.0.14...v9.0.0 )
---
updated-dependencies:
- dependency-name: actions/stale
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
d517450a11
Bump actions/checkout from 4.2.0 to 4.2.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.2.0 to 4.2.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](d632683dd7...eef61447b9 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
9e192b28eb
Bump golangci/golangci-lint-action from 6.1.0 to 6.1.1
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6.1.0 to 6.1.1.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](aaa42aa062...971e284b60 )
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
79257331c2
Bump golang/govulncheck-action from 1.0.3 to 1.0.4
...
Bumps [golang/govulncheck-action](https://github.com/golang/govulncheck-action ) from 1.0.3 to 1.0.4.
- [Release notes](https://github.com/golang/govulncheck-action/releases )
- [Commits](dd0578b371...b625fbe08f )
---
updated-dependencies:
- dependency-name: golang/govulncheck-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Matt Farina
b2286c4caa
Merge pull request #13328 from robertsirc/adjusting-go-setup-check-latest
...
adding check-latest:true
2 years ago
dependabot[bot]
2cd8d54c83
Bump actions/checkout from 4.1.7 to 4.2.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.7 to 4.2.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](692973e3d9...d632683dd7 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Robert Sirchia
a8750f4ce9
adding toplevel permissions to workflows missing them
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
Robert Sirchia
62069eb7b5
removing testing trigger from govulncheck action
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
Robert Sirchia
114db17898
adding top-level permissions
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
Matt Farina
3a3e3846ca
Merge pull request #13331 from helm/dependabot/github_actions/ossf/scorecard-action-2.4.0
...
Bump ossf/scorecard-action from 2.3.1 to 2.4.0
2 years ago
Matt Farina
334f5ed87e
Merge pull request #13330 from helm/dependabot/github_actions/actions/checkout-4.1.7
...
Bump actions/checkout from 4.1.1 to 4.1.7
2 years ago
Robert Sirchia
8642225be3
Fixing the action trigger
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
Robert Sirchia
5217ea8f18
testing permissing for codeql
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
dependabot[bot]
a1c0318480
Bump actions/upload-artifact
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 97a0fba1372883ab732affbe8f94b823f91727db to c24449f33cd45d4826c6702db7e49f7cdb9b551d.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](97a0fba137...c24449f33c )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
9134b9edab
Bump ossf/scorecard-action from 2.3.1 to 2.4.0
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.3.1 to 2.4.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](0864cf1902...62b2cac7ed )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
144e7b0287
Bump actions/checkout from 4.1.1 to 4.1.7
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.1 to 4.1.7.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4.1.1...692973e3d937129bcbf40652eb9f2f61becf3332 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Robert Sirchia
611fae3d7d
adding check-latest:true
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
Joe Julian
ef2719448b
Merge pull request #13233 from harshitasao/issue-13131
...
Added the scorecard github action and its badge
2 years ago
Joe Julian
1a55457375
Merge pull request #13259 from harshitasao/scorecard-checks-fix
...
fix: fixed the token-permission and pinned-dependencies issue
2 years ago
Robert Sirchia
e7b25bab6f
bumping version to 1.22.7
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
Robert Sirchia
5326d79d3e
refectoring to ONE GH action
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
Robert Sirchia
d91188159e
adding new lines at the end of each files
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
Robert Sirchia
1aa640fe1d
changing the trigger file
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
Robert Sirchia
3ef6dd4036
changing trigger file from go.sum to go.mod
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
Robert Sirchia
5f15f53e2e
removing govulncheck from build-test
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
Robert Sirchia
4df7d5628b
adding new workflows for govulncheck
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
Robert Sirchia
88fa81ecb6
adding a new line at the end of the file as per the request of the maintainers
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
Robert Sirchia
76b9d962f0
restoring the original triggers that were removed for testing
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
Robert Sirchia
38dd4a7fea
moving govulncheck to a seperate job
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
Robert Sirchia
1ad6af9287
removing specific go version for govulncheck
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
Robert Sirchia
e46e0ddb98
updating go version for govulncheck
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
Robert Sirchia
6757f8a81b
fixing directory for go-packages
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
Robert Sirchia
031b34458e
changing the triggers to test this GH actions
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
Robert Sirchia
7e3df4baaf
Adding in workflow_call to test GH Actions
...
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2 years ago
Robert Sirchia
eba0f78a47
Merge branch 'helm:main' into adding-goland-govulncheck-action
2 years ago