Commit Graph

74 Commits

Author SHA1 Message Date
renovate[bot]
c0775c35b4 chore(deps): update google/osv-scanner-action action to v2.2.1 (#925)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-08-11 02:07:30 +00:00
Mauro Morales
fab90fe89d Create CODEOWNERS 2025-07-31 09:11:16 +02:00
renovate[bot]
cd76c616a1 chore(deps): update securego/gosec action to v2.22.7 (#847)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-22 02:39:19 +00:00
renovate[bot]
c168340da1 chore(deps): update google/osv-scanner-action action to v2.1.0 (#842)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-16 04:46:58 +00:00
renovate[bot]
0c6c3633b1 chore(deps): update google/osv-scanner-action action to v2.0.3 (#817)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-06-16 23:42:25 +00:00
renovate[bot]
b00735a592 chore(deps): update securego/gosec action to v2.22.5 (#818)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-06-16 23:42:10 +00:00
renovate[bot]
6d1b5c0c9d chore(deps): update dependabot/fetch-metadata action to v2.4.0 (#784)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-10 03:24:18 +00:00
renovate[bot]
24d365e19b chore(deps): update securego/gosec action to v2.22.4 (#780)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-08 22:49:09 +00:00
renovate[bot]
62c2b834c6 chore(deps): update actions/setup-go action to v5.5.0 (#779)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-08 03:33:01 +00:00
renovate[bot]
251934559b chore(deps): update google/osv-scanner-action action to v2.0.2 (#773)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-05 02:06:08 +00:00
Itxaka
1182776075 Install arm64 gcc compiler
Signed-off-by: Itxaka <itxaka@kairos.io>
2025-04-11 17:21:49 +02:00
renovate[bot]
62b6a63f57 chore(deps): update securego/gosec action to v2.22.3 (#741)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-04 22:58:15 +00:00
renovate[bot]
c62f26884e chore(deps): update google/osv-scanner-action action to v2.0.1 (#739)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-03 21:58:13 +00:00
Itxaka
d83f78047f Bump sdk (#733)
* Bump sdk

---------

Signed-off-by: Itxaka <itxaka@kairos.io>
2025-04-02 14:47:05 +02:00
renovate[bot]
06aa2ce4e4 chore(deps): update google/osv-scanner-action action to v2 (#724)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-24 02:14:31 +00:00
renovate[bot]
6845373bfd chore(deps): update actions/setup-go action to v5.4.0 (#712)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-19 05:46:58 +00:00
Itxaka
b5869b4017 Fix hooks under encrypted partitions (#702)
* Fix hooks under encrypted partitions

We had a mess of mounting and unmounting things around when we try to
copy things to persistent.

Part of the changes (using the by-label to mount the persistent) are due
to the change in kcrypt. As we set the same label to the encrypted fs
and unencrypted fs, our utils.Mount could get mistaken and return the
first hit, which usually its the encrypted one, and we cannot mount that
one.

This patch brings it up to date.

 - Makes bundles and logs hooks work when we have encrypted persistent.
   It didnt work before.
 - Makes both workflows the same.
 - Locks everything once its over, to not leave encrypted parts around
 - Mounts OEM so kcrypt can read the config if we are using a remote
   server for encryption
 - Mounts by label so there is not a change of getting the wrong device
 - Uses the mount syscall directly. The util can mistake and return the
   actual encrypted part if they both have the same label and finds it
   first

---------

Signed-off-by: Itxaka <itxaka@kairos.io>
2025-03-13 11:22:26 +01:00
renovate[bot]
e2f2b53b99 chore(deps): update securego/gosec action to v2.22.2 (#697)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-06 02:49:05 +00:00
renovate[bot]
d9381c3ae3 chore(deps): update securego/gosec action to v2.22.1 (#683)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-13 23:26:24 +00:00
renovate[bot]
2955e3275b chore(deps): update dependabot/fetch-metadata action to v2.3.0 (#669)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-05 00:28:05 +00:00
renovate[bot]
900779f98e chore(deps): update actions/setup-go action to v5.3.0 (#668)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-21 05:48:35 +00:00
renovate[bot]
63067dcbcb chore(deps): update securego/gosec action to v2.22.0 (#656)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-09 23:15:54 +00:00
renovate[bot]
71e8e5b801 chore(deps): update google/osv-scanner-action action to v1.9.2 (#640)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-20 04:19:36 +00:00
renovate[bot]
9d9da86e69 chore(deps): update google/osv-scanner-action action to v1.9.1 (#633)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-13 02:50:50 +00:00
renovate[bot]
c6166c9b7a chore(deps): update actions/setup-go action to v5.2.0 (#627)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-11 04:36:57 +00:00
renovate[bot]
94cb4c9a7c chore(deps): update codecov/codecov-action action to v5 (#597)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-11-15 01:54:35 +00:00
renovate[bot]
c7df8f3f0e chore(deps): update actions/setup-go action to v5.1.0 (#584)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-25 00:48:15 +00:00
renovate[bot]
ee0ae628f3 chore(deps): update google/osv-scanner-action action to v1.9.0 (#569)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-02 21:18:49 +00:00
renovate[bot]
202f2f9c91 chore(deps): update securego/gosec action to v2.21.4 (#554)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-26 12:11:40 +00:00
Itxaka
ea731eb99f Revert "chore(deps): update securego/gosec action to v2.21.3 (#551)" (#553) 2024-09-20 17:48:23 +02:00
renovate[bot]
970eb1aa72 chore(deps): update securego/gosec action to v2.21.3 (#551)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-19 22:56:00 +00:00
Itxaka
157ea5b7ba Revert "chore(deps): update securego/gosec action to v2.21.3" (#549) 2024-09-19 15:12:51 +02:00
renovate[bot]
22d4d97503 chore(deps): update securego/gosec action to v2.21.3 2024-09-19 14:47:21 +02:00
Itxaka
fbb64f2a82 Run tests in parallel and output github formats on workflow (#543)
* Run tests in parallel and output github formats on workflow

Signed-off-by: Itxaka <itxaka@kairos.io>

* Fix broken parallel tests

We were using a fixed file for the tests which several tests could be
accessing at the same time.

This fixes it by setting a temp random file at the test start

Signed-off-by: Itxaka <itxaka@kairos.io>

* Fix the tests logging to stdout

Signed-off-by: Itxaka <itxaka@kairos.io>

* Drop the verbose

Signed-off-by: Itxaka <itxaka@kairos.io>

* Fix agent test

Signed-off-by: Itxaka <itxaka@kairos.io>

* Let the event consumer create the logfile or whatever

Signed-off-by: Itxaka <itxaka@kairos.io>

* Drop Focus

Signed-off-by: Itxaka <itxaka@kairos.io>

---------

Signed-off-by: Itxaka <itxaka@kairos.io>
2024-09-17 17:51:11 +02:00
renovate[bot]
5c5c307cff chore(deps): update google/osv-scanner-action action to v1.8.5 2024-09-12 01:28:52 +00:00
Itxaka
771c8e298f Update secscan.yaml 2024-09-11 16:01:27 +02:00
renovate[bot]
e18834c0d3 chore(deps): update securego/gosec action to v2.21.1 2024-09-10 21:06:04 +00:00
Itxaka
7328ad2cd5 Bump go to 1.23.1 (#526) 2024-09-10 15:29:49 +02:00
renovate[bot]
e46edfc5fc chore(deps): update google/osv-scanner-action action to v1.8.4 2024-08-22 23:15:34 +00:00
renovate[bot]
2a5c8f2c2f Update google/osv-scanner-action action to v1.8.3 2024-08-08 23:20:48 +00:00
Itxaka
7576c99faf Run secscans in proper events (#410) 2024-07-12 10:21:30 +02:00
renovate[bot]
064e9d68df Update dependabot/fetch-metadata action to v2.2.0 (#398)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-11 09:43:17 +00:00
renovate[bot]
1993ab2494 Update google/osv-scanner-action action to v1.8.2 2024-07-11 09:42:53 +00:00
Itxaka
5a23b643c0 Bump go to 1.22 and yip to latest (#405) 2024-07-11 11:36:54 +02:00
renovate[bot]
69e49f579a Update google/osv-scanner-action action to v1.8.1 (#394)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-02 22:09:58 +00:00
Mauro Morales
fb5a0e3d04 Run osv scanner on PRs (#392)
Signed-off-by: Mauro Morales <mauro.morales@spectrocloud.com>
2024-07-02 12:43:36 +02:00
renovate[bot]
15a506de77 Update goreleaser/goreleaser-action action to v6 (#367)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-05 03:36:38 +00:00
renovate[bot]
2464e63971 Update github/codeql-action action to v3 (#291)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-16 09:41:54 +00:00
renovate[bot]
2faa8416d7 Update actions/checkout action to v4 (#290)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-16 09:29:17 +00:00
Mauro Morales
f31a926fc0 Force go 1.19 for releases (#333)
Signed-off-by: Mauro Morales <mauro.morales@spectrocloud.com>
2024-05-16 10:52:09 +02:00