github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2026-04-10 14:04:19 +00:00
Code Issues Projects Releases Wiki Activity
3,663 Commits 129 Branches 185 Tags
f006f2e01a760e1bac7908623e5a22ea3e256dff
Commit Graph

58 Commits

Author SHA1 Message Date
Luca Guerra
5237aa196c fix(ci): add Cloudfront Distribution ID 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-05-02 14:25:07 +02:00
Luca Guerra
4e25367350 fix(ci): escape heredoc 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-05-02 09:47:30 +02:00
Federico Di Pierro
593404e79e chore(ci): build-musl-package does not need to wait for build-packages anymore. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-28 14:53:17 +02:00
Luca Guerra
6650a4f31f fix(ci): only add the secret key to env when necessary 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-04-28 13:21:17 +02:00
Luca Guerra
d1e6452ad7 fix(ci): download artifacts one by one 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-04-28 13:21:17 +02:00
Luca Guerra
6d0aff7463 fix(ci): update fetch-version steps 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-04-28 13:21:17 +02:00
Federico Di Pierro
a193a46981 chore(ci): properly document new reusable_build_packages step. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

Co-authored-by: Luca Guerra <luca@guerra.sh>
 2023-04-28 10:14:16 +02:00
Federico Di Pierro
f448023a8f fix(ci): properly fetch Falco version in a single step, then force-use it in subsequent steps, in reusable build packages. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-28 10:14:16 +02:00
Federico Di Pierro
c225819186 chore(ci): build recent git from source in centos7 reusable build packages workflow. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-28 10:14:16 +02:00
Federico Di Pierro
a5efbc9483 fix(ci): try to fix Falco version. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-28 10:14:16 +02:00
Federico Di Pierro
ad75c87e21 chore(ci): properly install recent version of git (needed >= 2.18 by checkout action) to fix Falco versioning. 
Moreover, fixed path to output packages from Falco `make package` target.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-27 20:14:15 +02:00
Luca Guerra
fb105c4b04 fix(ci): enable toolset before every make command 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-04-27 16:32:14 +02:00
Luca Guerra
fe8899c90a fix(ci): remove unnecessary mv 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-04-27 15:47:14 +02:00
Luca Guerra
2de8c06bb1 fix(ci): bucket -> bucket_suffix 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-04-27 15:03:14 +02:00
Federico Di Pierro
86d33ae5ab chore(ci): improved GPG_KEY management through an env. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

Co-authored-by: Luca Guerra <luca@guerra.sh>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
9d6a7d8ca3 chore(ci): use Noelware/docker-manifest-action pinned version to latest tag. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

Co-authored-by: Luca Guerra <luca@guerra.sh>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
d27828a0d2 chore(ci): added some comments. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

Co-authored-by: Luca Guerra <luca@guerra.sh>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
89f29e6d4b chore(ci): renamed bucket to bucket_suffix. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

Co-authored-by: Luca Guerra <luca@guerra.sh>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
2a22189222 chore(ci): added AWS ECR login to reusable_publish_docker. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

Co-authored-by: Luca Guerra <luca@guerra.sh>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
a5620b81b2 chore(ci): reusable_public_packages needs proper permissions. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
b9c0ca3abe chore(ci): avoid publishing images in reusable_build_docker.yaml workflow. 
Instead, store image tarballs as artifact and download them in `reusable_publish_docker.yaml` workflow,
to be finally merged in multi-arch images and pushed.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
008d908ee0 cleanup(ci): dropped test jobs in CI.yml. 
Some small fixes in other workflows.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
2f11d9f506 chore(ci): install awscli in reusable_build_docker workflow. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
60d8c49772 fix(ci): do not use inputs.tagname. Instead, rely on github.ref_name. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
3693cd0685 chore(ci): test reusable_build_docker from PR CI. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
31da4b4c3d chore(ci): run reusable_build_docker workflow without any container. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
9551e9f277 chore(ci): added aws credentials role to the reusable_publish_packages workflow. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
2af7fd9f0f fix(ci): fixed reusable_build_packages to properly install git before invoking checkout action, to download full repo. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
1c3aa7a83b chore(ci): multiple fixes to new master and release ci jobs. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
18372323d9 cleanup(ci): dropped test arm64 job from pull_request CI, since it is now working. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
be13ee044e chore(ci): fixed up master and release yamls. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
ac4e27ccde update(ci): add an arm test CI job. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
cafb804c11 chore(ci): disable on push: master trigger for ci.yml. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
6bf6a34a59 chore(ci): add proper concurrency groups for master and release CI. 
Renamed `dev.yaml` to `master.yaml`.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
b138e4c9e1 new(ci): added github action workflows for dev and release CI (packages + docker images publish). 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-27 14:25:14 +02:00
Federico Di Pierro
597f07ccae update(ci): only set concurrency group for PRs. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

Co-authored-by: Mauro Ezequiel Moltrasio <mmoltras@redhat.com>
 2023-04-04 17:09:53 +02:00
Federico Di Pierro
de23899e49 cleanup(ci): properly set a concurrency for CI workflows. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-04-04 17:09:53 +02:00
Federico Di Pierro
e8a62f6800 new(ci): added new workflow to automatic tag and publish new builder and tester images upon changes. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-02-14 09:49:05 +01:00
Andrea Terzolo
0004b140b1 ci: use new unit tests where necessary 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-02-10 11:41:24 +01:00
Andrea Terzolo
100e92a6fb fix: job step name 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
Co-authored-by: Federico Di Pierro <nierro92@gmail.com>
 2022-12-19 11:48:00 +01:00
Andrea Terzolo
9b41b77d53 cleanup(ci): move static analysis from circle CI to GHA 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2022-12-19 11:48:00 +01:00
Andrea Terzolo
b758206cf1 cleanup(ci): remove some no more useful jobs 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2022-12-15 12:31:19 +01:00
Federico Di Pierro
0c39776557 chore(ci): properly checkout pull request HEAD instead of merge commit in gh actions. 
See https://github.com/actions/checkout#checkout-pull-request-head-commit-instead-of-merge-commit.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2022-12-12 11:11:44 +01:00
Andrea Terzolo
3e3a380702 update(CI): do not check hidden files with codespell 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
Co-authored-by: Leonardo Grasso <me@leonardograsso.com>
 2022-08-23 16:29:05 +02:00
Andrea Terzolo
02fce93d02 update(CI): remove release branches from the push event 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
Co-authored-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2022-08-23 15:55:05 +02:00
Andrea Terzolo
6051f2de81 update(CI): build Falco to run CodeQL Analysis 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2022-08-23 15:55:05 +02:00
Andrea Terzolo
9359db904b update(CI): remove python from languages 
we use python only in out tests

Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2022-08-23 15:55:05 +02:00
Andrea Terzolo
4c3b797003 update(CI): remove codeQL schedule option 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2022-08-23 15:55:05 +02:00
Andrea Terzolo
8259a2cd5f new(CI): add CodeQL security scanning to Falco. 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
Co-authored-by: Chris Aniszczyk <caniszczyk@gmail.com>
 2022-08-23 15:55:05 +02:00
Federico Di Pierro
a7ebfbf137 update(ci): add workflow_dispatch to be able to manually trigger ci. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2022-05-13 17:28:54 +02:00