b579dc598b
Bump docker/build-push-action from 4.1.0 to 4.1.1
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](44ea916f6c...2eb1c1961a
2 years ago
04c5f60287
Bump docker/metadata-action from 4.5.0 to 4.6.0
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 4.5.0 to 4.6.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](2c0bd771b4...818d4b7b91
2 years ago
fb0b762293
Bump docker/build-push-action from 4.0.0 to 4.1.0
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](3b5e8027fc...44ea916f6c
2 years ago
5b799b4536
Bump docker/metadata-action from 4.4.0 to 4.5.0
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 4.4.0 to 4.5.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](c4ee3adeed...2c0bd771b4
2 years ago
8050d7353d
Bump docker/login-action from 2.1.0 to 2.2.0
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](f4ef78c080...465a07811f
2 years ago
1d0da28d9e
Bump docker/metadata-action from 4.3.0 to 4.4.0
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 4.3.0 to 4.4.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](507c2f2dc5...c4ee3adeed
2 years ago
b4963d872b
Bump docker/build-push-action from 3.3.0 to 4.0.0
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 3.3.0 to 4.0.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](37abcedcc1...3b5e8027fc
2 years ago
e0aad13fef
Bump docker/metadata-action from 4.1.1 to 4.3.0
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 4.1.1 to 4.3.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](57396166ad...507c2f2dc5
2 years ago
05139ed553
Bump docker/build-push-action from 3.2.0 to 3.3.0
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](c56af95754...37abcedcc1
2 years ago
5379541733
Bump helm/chart-releaser-action from 1.4.1 to 1.5.0
...
Bumps [helm/chart-releaser-action](https://github.com/helm/chart-releaser-action ) from 1.4.1 to 1.5.0.
- [Release notes](https://github.com/helm/chart-releaser-action/releases )
- [Commits](https://github.com/helm/chart-releaser-action/compare/v1.4.1...v1.5.0 )
---
updated-dependencies:
- dependency-name: helm/chart-releaser-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
5507db8950
Bump VeryGoodOpenSource/very_good_coverage from 2.0.0 to 2.1.0
...
Bumps [VeryGoodOpenSource/very_good_coverage](https://github.com/VeryGoodOpenSource/very_good_coverage ) from 2.0.0 to 2.1.0.
- [Release notes](https://github.com/VeryGoodOpenSource/very_good_coverage/releases )
- [Changelog](https://github.com/VeryGoodOpenSource/very_good_coverage/blob/main/CHANGELOG.md )
- [Commits](https://github.com/VeryGoodOpenSource/very_good_coverage/compare/v2.0.0...v2.1.0 )
---
updated-dependencies:
- dependency-name: VeryGoodOpenSource/very_good_coverage
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
c9466c688b
Bump actions/dependency-review-action from 2 to 3
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 2 to 3.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](https://github.com/actions/dependency-review-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
4543fd73df
Bump docker/build-push-action from 3.1.1 to 3.2.0
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 3.1.1 to 3.2.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](c84f382811...c56af95754
3 years ago
4d47f6b80b
Bump docker/metadata-action from 4.0.1 to 4.1.1
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 4.0.1 to 4.1.1.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](69f6fc9d46...57396166ad
3 years ago
5f8f5f2892
Bump docker/login-action from 2.0.0 to 2.1.0
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 2.0.0 to 2.1.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](49ed152c8e...f4ef78c080
3 years ago
d1dfffb4b2
Bump VeryGoodOpenSource/very_good_coverage from 1.2.1 to 2.0.0
...
Bumps [VeryGoodOpenSource/very_good_coverage](https://github.com/VeryGoodOpenSource/very_good_coverage ) from 1.2.1 to 2.0.0.
- [Release notes](https://github.com/VeryGoodOpenSource/very_good_coverage/releases )
- [Changelog](https://github.com/VeryGoodOpenSource/very_good_coverage/blob/main/CHANGELOG.md )
- [Commits](https://github.com/VeryGoodOpenSource/very_good_coverage/compare/v1.2.1...v2.0.0 )
---
updated-dependencies:
- dependency-name: VeryGoodOpenSource/very_good_coverage
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
1155cb8d68
Bump helm/chart-releaser-action from 1.4.0 to 1.4.1
...
Bumps [helm/chart-releaser-action](https://github.com/helm/chart-releaser-action ) from 1.4.0 to 1.4.1.
- [Release notes](https://github.com/helm/chart-releaser-action/releases )
- [Commits](https://github.com/helm/chart-releaser-action/compare/v1.4.0...v1.4.1 )
---
updated-dependencies:
- dependency-name: helm/chart-releaser-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
81e847a153
build: harden GitHub Workflow permissions
...
Signed-off-by: Alex Low <aleksandrosansan@gmail.com>
3 years ago
834408c740
a new commit message
3 years ago
3762768ed3
Bump docker/build-push-action from 3.1.0 to 3.1.1
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](1cb9d22b93...c84f382811
3 years ago
72c44e703f
Bump docker/build-push-action from 3.0.0 to 3.1.0
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](e551b19e49...1cb9d22b93
3 years ago
b4c74b8d4c
Bump actions/dependency-review-action from 1 to 2
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 1 to 2.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](https://github.com/actions/dependency-review-action/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
63e0597c68
Bump actions/upload-artifact from 2 to 3
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 2 to 3.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
c71cedf9f4
Bump helm/chart-releaser-action from 1.1.0 to 1.4.0
...
Bumps [helm/chart-releaser-action](https://github.com/helm/chart-releaser-action ) from 1.1.0 to 1.4.0.
- [Release notes](https://github.com/helm/chart-releaser-action/releases )
- [Commits](https://github.com/helm/chart-releaser-action/compare/v1.1.0...v1.4.0 )
---
updated-dependencies:
- dependency-name: helm/chart-releaser-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
f6ee321d0f
Bump docker/build-push-action from 2.5.0 to 3
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 2.5.0 to 3.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](ad44023a93...e551b19e49
3 years ago
2a24720fad
Bump actions/download-artifact from 2 to 3
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 2 to 3.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
a7fd512124
Bump VeryGoodOpenSource/very_good_coverage from 1.1.1 to 1.2.1
...
Bumps [VeryGoodOpenSource/very_good_coverage](https://github.com/VeryGoodOpenSource/very_good_coverage ) from 1.1.1 to 1.2.1.
- [Release notes](https://github.com/VeryGoodOpenSource/very_good_coverage/releases )
- [Changelog](https://github.com/VeryGoodOpenSource/very_good_coverage/blob/main/CHANGELOG.md )
- [Commits](https://github.com/VeryGoodOpenSource/very_good_coverage/compare/v1.1.1...v1.2.1 )
---
updated-dependencies:
- dependency-name: VeryGoodOpenSource/very_good_coverage
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
680770a7df
chore(deps): Included dependency review
...
> Dependency Review GitHub Action in your repository to enforce dependency
> reviews on your pull requests.
> The action scans for vulnerable versions of dependencies introduced by package version
> changes in pull requests,
> and warns you about the associated security vulnerabilities.
> This gives you better visibility of what's changing in a pull request,
> and helps prevent vulnerabilities being added to your repository.
https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
3 years ago
1ed2c3b45a
Bump docker/login-action from 1.9.0 to 2
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 1.9.0 to 2.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](28218f9b04...49ed152c8e
3 years ago
d5247daf8a
Bump github/codeql-action from 1 to 2
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 1 to 2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
9ff87d189f
Bump actions/cache from 2 to 3
...
Bumps [actions/cache](https://github.com/actions/cache ) from 2 to 3.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
2d36116823
Bump docker/metadata-action from 3.3.0 to 4.0.1
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 3.3.0 to 4.0.1.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Upgrade guide](https://github.com/docker/metadata-action/blob/master/UPGRADE.md )
- [Commits](98669ae865...69f6fc9d46
3 years ago
9f0b9b29a5
Bump actions/checkout from 2 to 3
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
355b358fe2
chore: Set permissions for GitHub actions
...
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ )
Signed-off-by: neilnaveen <42328488+neilnaveen@users.noreply.github.com>
3 years ago
62efb67d06
Fix typo in tests.
3 years ago
b12312f998
Create release.yml
4 years ago
70ba1eca78
Create docker-publish.yml
4 years ago
e925877ae4
Delete not working workflow
4 years ago
0e7cc1ef87
Create docker-publish.yml
4 years ago
78555f57a7
Try to fix tests.
...
Thanks to xet7 !
4 years ago
6387d32c2f
ci fix script name
4 years ago
4d9ba8d73b
tests ci added
4 years ago
5dd6466c0a
Removed not working GitHub workflow.
...
Thanks to xet7 !
4 years ago
b9405bfb64
Update owasp-zap-scan.yml
4 years ago
5d8856a1c7
Update owasp-zap-scan.yml
4 years ago
5073c0e9ad
Create owasp-zap-scan.yml
...
https://github.com/marketplace/actions/owasp-zap-baseline-scan
4 years ago
df35683043
Create codeql-analysis.yml
5 years ago
8670561f78
Create dockerimage.yml
6 years ago
dependabot[bot]