Commit Graph

64 Commits

Author SHA1 Message Date
Itxaka
1182776075 Install arm64 gcc compiler
Signed-off-by: Itxaka <itxaka@kairos.io>
2025-04-11 17:21:49 +02:00
renovate[bot]
62b6a63f57
chore(deps): update securego/gosec action to v2.22.3 (#741)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-04 22:58:15 +00:00
renovate[bot]
c62f26884e
chore(deps): update google/osv-scanner-action action to v2.0.1 (#739)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-03 21:58:13 +00:00
Itxaka
d83f78047f
Bump sdk (#733)
* Bump sdk

---------

Signed-off-by: Itxaka <itxaka@kairos.io>
2025-04-02 14:47:05 +02:00
renovate[bot]
06aa2ce4e4
chore(deps): update google/osv-scanner-action action to v2 (#724)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-24 02:14:31 +00:00
renovate[bot]
6845373bfd
chore(deps): update actions/setup-go action to v5.4.0 (#712)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-19 05:46:58 +00:00
Itxaka
b5869b4017
Fix hooks under encrypted partitions (#702)
* Fix hooks under encrypted partitions

We had a mess of mounting and unmounting things around when we try to
copy things to persistent.

Part of the changes (using the by-label to mount the persistent) are due
to the change in kcrypt. As we set the same label to the encrypted fs
and unencrypted fs, our utils.Mount could get mistaken and return the
first hit, which usually its the encrypted one, and we cannot mount that
one.

This patch brings it up to date.

 - Makes bundles and logs hooks work when we have encrypted persistent.
   It didnt work before.
 - Makes both workflows the same.
 - Locks everything once its over, to not leave encrypted parts around
 - Mounts OEM so kcrypt can read the config if we are using a remote
   server for encryption
 - Mounts by label so there is not a change of getting the wrong device
 - Uses the mount syscall directly. The util can mistake and return the
   actual encrypted part if they both have the same label and finds it
   first

---------

Signed-off-by: Itxaka <itxaka@kairos.io>
2025-03-13 11:22:26 +01:00
renovate[bot]
e2f2b53b99
chore(deps): update securego/gosec action to v2.22.2 (#697)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-06 02:49:05 +00:00
renovate[bot]
d9381c3ae3
chore(deps): update securego/gosec action to v2.22.1 (#683)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-13 23:26:24 +00:00
renovate[bot]
2955e3275b
chore(deps): update dependabot/fetch-metadata action to v2.3.0 (#669)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-05 00:28:05 +00:00
renovate[bot]
900779f98e
chore(deps): update actions/setup-go action to v5.3.0 (#668)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-21 05:48:35 +00:00
renovate[bot]
63067dcbcb
chore(deps): update securego/gosec action to v2.22.0 (#656)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-09 23:15:54 +00:00
renovate[bot]
71e8e5b801
chore(deps): update google/osv-scanner-action action to v1.9.2 (#640)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-20 04:19:36 +00:00
renovate[bot]
9d9da86e69
chore(deps): update google/osv-scanner-action action to v1.9.1 (#633)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-13 02:50:50 +00:00
renovate[bot]
c6166c9b7a
chore(deps): update actions/setup-go action to v5.2.0 (#627)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-11 04:36:57 +00:00
renovate[bot]
94cb4c9a7c
chore(deps): update codecov/codecov-action action to v5 (#597)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-11-15 01:54:35 +00:00
renovate[bot]
c7df8f3f0e
chore(deps): update actions/setup-go action to v5.1.0 (#584)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-25 00:48:15 +00:00
renovate[bot]
ee0ae628f3
chore(deps): update google/osv-scanner-action action to v1.9.0 (#569)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-02 21:18:49 +00:00
renovate[bot]
202f2f9c91
chore(deps): update securego/gosec action to v2.21.4 (#554)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-26 12:11:40 +00:00
Itxaka
ea731eb99f
Revert "chore(deps): update securego/gosec action to v2.21.3 (#551)" (#553) 2024-09-20 17:48:23 +02:00
renovate[bot]
970eb1aa72
chore(deps): update securego/gosec action to v2.21.3 (#551)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-19 22:56:00 +00:00
Itxaka
157ea5b7ba
Revert "chore(deps): update securego/gosec action to v2.21.3" (#549) 2024-09-19 15:12:51 +02:00
renovate[bot]
22d4d97503 chore(deps): update securego/gosec action to v2.21.3 2024-09-19 14:47:21 +02:00
Itxaka
fbb64f2a82
Run tests in parallel and output github formats on workflow (#543)
* Run tests in parallel and output github formats on workflow

Signed-off-by: Itxaka <itxaka@kairos.io>

* Fix broken parallel tests

We were using a fixed file for the tests which several tests could be
accessing at the same time.

This fixes it by setting a temp random file at the test start

Signed-off-by: Itxaka <itxaka@kairos.io>

* Fix the tests logging to stdout

Signed-off-by: Itxaka <itxaka@kairos.io>

* Drop the verbose

Signed-off-by: Itxaka <itxaka@kairos.io>

* Fix agent test

Signed-off-by: Itxaka <itxaka@kairos.io>

* Let the event consumer create the logfile or whatever

Signed-off-by: Itxaka <itxaka@kairos.io>

* Drop Focus

Signed-off-by: Itxaka <itxaka@kairos.io>

---------

Signed-off-by: Itxaka <itxaka@kairos.io>
2024-09-17 17:51:11 +02:00
renovate[bot]
5c5c307cff chore(deps): update google/osv-scanner-action action to v1.8.5 2024-09-12 01:28:52 +00:00
Itxaka
771c8e298f
Update secscan.yaml 2024-09-11 16:01:27 +02:00
renovate[bot]
e18834c0d3 chore(deps): update securego/gosec action to v2.21.1 2024-09-10 21:06:04 +00:00
Itxaka
7328ad2cd5
Bump go to 1.23.1 (#526) 2024-09-10 15:29:49 +02:00
renovate[bot]
e46edfc5fc chore(deps): update google/osv-scanner-action action to v1.8.4 2024-08-22 23:15:34 +00:00
renovate[bot]
2a5c8f2c2f Update google/osv-scanner-action action to v1.8.3 2024-08-08 23:20:48 +00:00
Itxaka
7576c99faf
Run secscans in proper events (#410) 2024-07-12 10:21:30 +02:00
renovate[bot]
064e9d68df
Update dependabot/fetch-metadata action to v2.2.0 (#398)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-11 09:43:17 +00:00
renovate[bot]
1993ab2494 Update google/osv-scanner-action action to v1.8.2 2024-07-11 09:42:53 +00:00
Itxaka
5a23b643c0
Bump go to 1.22 and yip to latest (#405) 2024-07-11 11:36:54 +02:00
renovate[bot]
69e49f579a
Update google/osv-scanner-action action to v1.8.1 (#394)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-02 22:09:58 +00:00
Mauro Morales
fb5a0e3d04
Run osv scanner on PRs (#392)
Signed-off-by: Mauro Morales <mauro.morales@spectrocloud.com>
2024-07-02 12:43:36 +02:00
renovate[bot]
15a506de77
Update goreleaser/goreleaser-action action to v6 (#367)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-05 03:36:38 +00:00
renovate[bot]
2464e63971
Update github/codeql-action action to v3 (#291)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-16 09:41:54 +00:00
renovate[bot]
2faa8416d7
Update actions/checkout action to v4 (#290)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-16 09:29:17 +00:00
Mauro Morales
f31a926fc0
Force go 1.19 for releases (#333)
Signed-off-by: Mauro Morales <mauro.morales@spectrocloud.com>
2024-05-16 10:52:09 +02:00
renovate[bot]
3d20df360b
Update dependabot/fetch-metadata action to v2.1.0 (#315)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-04-25 23:22:45 +00:00
Mauro Morales
a9c6739119
Build web dependencies before producing release artifacts (#300)
Signed-off-by: Mauro Morales <contact@mauromorales.com>
2024-04-17 19:00:39 +02:00
renovate[bot]
a010d15054
Update dependabot/fetch-metadata action to v2 (#297)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-04-16 01:54:47 +00:00
renovate[bot]
962e97e1c5
Update dependabot/fetch-metadata action to v1.7.0 (#294)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-04-15 22:49:37 +00:00
Ettore Di Giacinto
46b3004892
Create renovate_auto.yml 2024-04-15 12:53:05 +02:00
Ettore Di Giacinto
ecac4ab327
Create dependabot_auto.yml 2024-04-15 12:52:43 +02:00
Ettore Di Giacinto
cfc5237c81
Create secscan.yaml 2024-03-28 10:32:46 +01:00
Itxaka
5d43c28f84
Update unit-tests.yml 2024-03-18 11:58:17 +01:00
renovate[bot]
7e075cc811
chore(deps): update actions/setup-go action to v5 (#252)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-18 11:12:35 +01:00
renovate[bot]
b44e147527
chore(deps): update codecov/codecov-action action to v4 (#253)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-18 11:12:04 +01:00