Commit Graph

82 Commits

Author SHA1 Message Date
renovate[bot]
7584e780c7 chore(deps): update google/osv-scanner-action action to v2.2.3 (#980)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-10-01 22:05:05 +00:00
renovate[bot]
dc1c6b798f chore(deps): update securego/gosec action to v2.22.9 (#976)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-22 21:51:47 +00:00
renovate[bot]
b5fd6cc0b0 chore(deps): update actions/setup-go action to v6 (#962)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-04 21:03:32 +00:00
renovate[bot]
3daf912288 chore(deps): update actions/setup-go action to v6 (#960)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-04 03:53:15 +00:00
renovate[bot]
314df0ae66 chore(deps): update google/osv-scanner-action action to v2.2.2 (#945)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-08-28 02:48:24 +00:00
Itxaka
48a67237ea Bump to go 1.25.0 (#941) 2025-08-26 16:03:21 +02:00
renovate[bot]
4e4494293a chore(deps): update securego/gosec action to v2.22.8 (#930)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-08-14 21:25:53 +00:00
renovate[bot]
613455facf chore(deps): update actions/checkout action to v5 (#926)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-08-11 22:49:46 +00:00
renovate[bot]
c0775c35b4 chore(deps): update google/osv-scanner-action action to v2.2.1 (#925)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-08-11 02:07:30 +00:00
Mauro Morales
fab90fe89d Create CODEOWNERS 2025-07-31 09:11:16 +02:00
renovate[bot]
cd76c616a1 chore(deps): update securego/gosec action to v2.22.7 (#847)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-22 02:39:19 +00:00
renovate[bot]
c168340da1 chore(deps): update google/osv-scanner-action action to v2.1.0 (#842)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-16 04:46:58 +00:00
renovate[bot]
0c6c3633b1 chore(deps): update google/osv-scanner-action action to v2.0.3 (#817)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-06-16 23:42:25 +00:00
renovate[bot]
b00735a592 chore(deps): update securego/gosec action to v2.22.5 (#818)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-06-16 23:42:10 +00:00
renovate[bot]
6d1b5c0c9d chore(deps): update dependabot/fetch-metadata action to v2.4.0 (#784)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-10 03:24:18 +00:00
renovate[bot]
24d365e19b chore(deps): update securego/gosec action to v2.22.4 (#780)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-08 22:49:09 +00:00
renovate[bot]
62c2b834c6 chore(deps): update actions/setup-go action to v5.5.0 (#779)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-08 03:33:01 +00:00
renovate[bot]
251934559b chore(deps): update google/osv-scanner-action action to v2.0.2 (#773)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-05 02:06:08 +00:00
Itxaka
1182776075 Install arm64 gcc compiler
Signed-off-by: Itxaka <itxaka@kairos.io>
2025-04-11 17:21:49 +02:00
renovate[bot]
62b6a63f57 chore(deps): update securego/gosec action to v2.22.3 (#741)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-04 22:58:15 +00:00
renovate[bot]
c62f26884e chore(deps): update google/osv-scanner-action action to v2.0.1 (#739)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-03 21:58:13 +00:00
Itxaka
d83f78047f Bump sdk (#733)
* Bump sdk

---------

Signed-off-by: Itxaka <itxaka@kairos.io>
2025-04-02 14:47:05 +02:00
renovate[bot]
06aa2ce4e4 chore(deps): update google/osv-scanner-action action to v2 (#724)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-24 02:14:31 +00:00
renovate[bot]
6845373bfd chore(deps): update actions/setup-go action to v5.4.0 (#712)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-19 05:46:58 +00:00
Itxaka
b5869b4017 Fix hooks under encrypted partitions (#702)
* Fix hooks under encrypted partitions

We had a mess of mounting and unmounting things around when we try to
copy things to persistent.

Part of the changes (using the by-label to mount the persistent) are due
to the change in kcrypt. As we set the same label to the encrypted fs
and unencrypted fs, our utils.Mount could get mistaken and return the
first hit, which usually its the encrypted one, and we cannot mount that
one.

This patch brings it up to date.

 - Makes bundles and logs hooks work when we have encrypted persistent.
   It didnt work before.
 - Makes both workflows the same.
 - Locks everything once its over, to not leave encrypted parts around
 - Mounts OEM so kcrypt can read the config if we are using a remote
   server for encryption
 - Mounts by label so there is not a change of getting the wrong device
 - Uses the mount syscall directly. The util can mistake and return the
   actual encrypted part if they both have the same label and finds it
   first

---------

Signed-off-by: Itxaka <itxaka@kairos.io>
2025-03-13 11:22:26 +01:00
renovate[bot]
e2f2b53b99 chore(deps): update securego/gosec action to v2.22.2 (#697)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-06 02:49:05 +00:00
renovate[bot]
d9381c3ae3 chore(deps): update securego/gosec action to v2.22.1 (#683)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-13 23:26:24 +00:00
renovate[bot]
2955e3275b chore(deps): update dependabot/fetch-metadata action to v2.3.0 (#669)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-05 00:28:05 +00:00
renovate[bot]
900779f98e chore(deps): update actions/setup-go action to v5.3.0 (#668)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-21 05:48:35 +00:00
renovate[bot]
63067dcbcb chore(deps): update securego/gosec action to v2.22.0 (#656)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-09 23:15:54 +00:00
renovate[bot]
71e8e5b801 chore(deps): update google/osv-scanner-action action to v1.9.2 (#640)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-20 04:19:36 +00:00
renovate[bot]
9d9da86e69 chore(deps): update google/osv-scanner-action action to v1.9.1 (#633)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-13 02:50:50 +00:00
renovate[bot]
c6166c9b7a chore(deps): update actions/setup-go action to v5.2.0 (#627)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-11 04:36:57 +00:00
renovate[bot]
94cb4c9a7c chore(deps): update codecov/codecov-action action to v5 (#597)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-11-15 01:54:35 +00:00
renovate[bot]
c7df8f3f0e chore(deps): update actions/setup-go action to v5.1.0 (#584)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-25 00:48:15 +00:00
renovate[bot]
ee0ae628f3 chore(deps): update google/osv-scanner-action action to v1.9.0 (#569)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-02 21:18:49 +00:00
renovate[bot]
202f2f9c91 chore(deps): update securego/gosec action to v2.21.4 (#554)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-26 12:11:40 +00:00
Itxaka
ea731eb99f Revert "chore(deps): update securego/gosec action to v2.21.3 (#551)" (#553) 2024-09-20 17:48:23 +02:00
renovate[bot]
970eb1aa72 chore(deps): update securego/gosec action to v2.21.3 (#551)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-19 22:56:00 +00:00
Itxaka
157ea5b7ba Revert "chore(deps): update securego/gosec action to v2.21.3" (#549) 2024-09-19 15:12:51 +02:00
renovate[bot]
22d4d97503 chore(deps): update securego/gosec action to v2.21.3 2024-09-19 14:47:21 +02:00
Itxaka
fbb64f2a82 Run tests in parallel and output github formats on workflow (#543)
* Run tests in parallel and output github formats on workflow

Signed-off-by: Itxaka <itxaka@kairos.io>

* Fix broken parallel tests

We were using a fixed file for the tests which several tests could be
accessing at the same time.

This fixes it by setting a temp random file at the test start

Signed-off-by: Itxaka <itxaka@kairos.io>

* Fix the tests logging to stdout

Signed-off-by: Itxaka <itxaka@kairos.io>

* Drop the verbose

Signed-off-by: Itxaka <itxaka@kairos.io>

* Fix agent test

Signed-off-by: Itxaka <itxaka@kairos.io>

* Let the event consumer create the logfile or whatever

Signed-off-by: Itxaka <itxaka@kairos.io>

* Drop Focus

Signed-off-by: Itxaka <itxaka@kairos.io>

---------

Signed-off-by: Itxaka <itxaka@kairos.io>
2024-09-17 17:51:11 +02:00
renovate[bot]
5c5c307cff chore(deps): update google/osv-scanner-action action to v1.8.5 2024-09-12 01:28:52 +00:00
Itxaka
771c8e298f Update secscan.yaml 2024-09-11 16:01:27 +02:00
renovate[bot]
e18834c0d3 chore(deps): update securego/gosec action to v2.21.1 2024-09-10 21:06:04 +00:00
Itxaka
7328ad2cd5 Bump go to 1.23.1 (#526) 2024-09-10 15:29:49 +02:00
renovate[bot]
e46edfc5fc chore(deps): update google/osv-scanner-action action to v1.8.4 2024-08-22 23:15:34 +00:00
renovate[bot]
2a5c8f2c2f Update google/osv-scanner-action action to v1.8.3 2024-08-08 23:20:48 +00:00
Itxaka
7576c99faf Run secscans in proper events (#410) 2024-07-12 10:21:30 +02:00
renovate[bot]
064e9d68df Update dependabot/fetch-metadata action to v2.2.0 (#398)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-11 09:43:17 +00:00