chrislu
2988e69b1e
update go build
3 years ago
naveensrinivasan
3d5fc72d55
chore(deps): Included dependency review
> Dependency Review GitHub Action in your repository to enforce dependency reviews on your pull requests.
> The action scans for vulnerable versions of dependencies introduced by package version changes in pull requests,
> and warns you about the associated security vulnerabilities.
> This gives you better visibility of what's changing in a pull request,
> and helps prevent vulnerabilities being added to your repository.
https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
3 years ago
dependabot[bot]
9f9e0deafb
Bump docker/metadata-action from 3.6.2 to 3.7.0
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 3.6.2 to 3.7.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](e5622373a3
...f2a13332ac1ce8c0a71aeac48a150dbb1838ab67)
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
naveensrinivasan
5b352ec1d2
Set permissions for GitHub actions
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
3 years ago
dependabot[bot]
c0475cc267
Bump actions/setup-go from 2.2.0 to 3
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 2.2.0 to 3.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](bfdd3570ce
...f6164bd8c8acb4a71fb2791a8b6c4024ff038dab)
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
naveensrinivasan
dd737bd755
Pin actions to a full length commit SHA
- Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
>Pin actions to a full length commit SHA
>Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload.
https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions
3 years ago
Chris Lu
5f3784ee05
Update binaries_dev.yml
3 years ago
Chris Lu
1dced26304
Update binaries_dev.yml
3 years ago
Chris Lu
da1c755f6a
fix build issue
fix https://github.com/wangyoucao577/go-release-action/issues/66
3 years ago
Chris Lu
791aa3cb44
update to wangyoucao577/go-release-action@v1.21
3 years ago
Chris Lu
320a08f250
adjust go release action version
3 years ago
Chris Lu
177129013c
releases in github actions disable http2client
3 years ago
Chris Lu
4d388b9782
Update binaries_dev.yml
3 years ago
Chris Lu
5eb905a5d1
Update binaries_dev.yml
3 years ago
Chris Lu
79a1903021
Update binaries_dev.yml
3 years ago
Jay Zhang
12d9108bb4
chore: disable http2 in go-release-action
3 years ago
Chris Lu
b0b2a03ea7
Update binaries_dev.yml
3 years ago
Chris Lu
641ce36f6f
Update binaries_dev.yml
3 years ago
Chris Lu
12e6692dac
trying wangyoucao577/go-release-action@bugfix/upload-fail
following https://github.com/wangyoucao577/go-release-action/issues/63#issuecomment-962417798
3 years ago
Chris Lu
5296c397f4
build latest container
3 years ago
Chris Lu
0a7e532fb2
Update binaries_dev.yml
3 years ago
Chris Lu
94700d65ba
serialize building dev binaries
3 years ago
Chris Lu
84d2e1bdd0
fix container building, make it same as rocksdb image
3 years ago
Chris Lu
4800d0ce26
separate into multiple actions
3 years ago
Chris Lu
bde2fc65b0
separate into multiple jobs for better execution
3 years ago
Chris Lu
0c12a7d12a
github action build rocksdb image
3 years ago
Chris Lu
adfd79e243
skip arm platform
3 years ago
Chris Lu
eab7cf4bd3
restore dev binaries building
3 years ago
Chris Lu
a0a6aa36fa
adjust name
3 years ago
Chris Lu
85a2046411
move out latest container building
3 years ago
Chris Lu
9ca7c322b4
reduce resource usage
3 years ago
Chris Lu
2954bd71f8
testing different binary name
3 years ago
Chris Lu
ce9e606eb2
fix waiting, binary name.
3 years ago
Chris Lu
ee143f9ae0
github action adds dependencies
3 years ago
Chris Lu
5035b0a109
build binaries on release
3 years ago
Chris Lu
a443e39def
add back delays
3 years ago
Chris Lu
64971b0d7e
merge into one action
3 years ago
Chris Lu
68b23114b9
adjust actions
3 years ago
Chris Lu
0c47437ece
Revert "action: delete previous assets"
This reverts commit 9ec151fa0d
.
3 years ago
Chris Lu
9ec151fa0d
action: delete previous assets
3 years ago
Chris Lu
d5c7dbac4a
docker: build dev containers
3 years ago
Chris Lu
d869a07cd2
clean up
3 years ago
Chris Lu
705285ec60
rename file
3 years ago
Chris Lu
f2de7910fc
move latest image build to after binary released
3 years ago
Chris Lu
ae98a085d3
automated latest image build
3 years ago
Alexander
aeda4be42c
fix(ci): use cleaner naming for jobs
3 years ago
Alexander
7cfaa1a365
fix(ci): further testing of CI logic
3 years ago
Alexander
bfb66b88b1
fix(ci): do not run on mainline branch
3 years ago
Alexander
16f0cdc1bf
fix(ci): never try to push on test pull request
3 years ago
Alexander
b686e8c45b
fix(ci): update latest to only run once
3 years ago