opendefensecloud / solution-arsenal

77%

main: 76%

LAST BUILD ON BRANCH chore/harden-github-workflows

branch: chore/harden-github-workflows

CHANGE BRANCH

x

Reset

• chore/harden-github-workflows
• boilerplate
• bugfix/258-discovery-filter-fix
• bugfix/26-fix-empty-resourceversion
• bugfix/350-fix-error-reporting
• bugfix/fix-codegen
• bugfix/go-updates-via-renovate
• chore/150-refactor-backoff
• chore/189-code-quality-imrpovements
• chore/28-migrate-runners
• chore/322-update-controller-tests-watch-namespace
• chore/437-consolidate-tegistry-types
• chore/556-envtest
• chore/add-missing-methods-to-v1alpha1-types
• chore/add-osv-scanner
• chore/event-recorder-api-change
• chore/golangci-gh-action-trigger
• chore/golangci-lint
• chore/prevent-cache-e2e-tests
• chore/replace-get-event-recorder-for
• chore/update-deps
• chore/update-go
• chore/use-golangci-action
• chore/validate-conventional-commits-and-title
• dependabot/github_actions/actions/checkout-6
• dependabot/github_actions/codecov/codecov-action-5
• dependabot/github_actions/dependabot/fetch-metadata-2.5.0
• dependabot/github_actions/docker/build-push-action-6
• dependabot/github_actions/golangci/golangci-lint-action-9
• dependabot/github_actions/softprops/action-gh-release-2
• dependabot/go_modules/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream-1.7.8
• dependabot/go_modules/github.com/aws/aws-sdk-go-v2/service/s3-1.97.3
• dependabot/go_modules/github.com/go-git/go-git/v5-5.16.5
• dependabot/go_modules/github.com/go-git/go-git/v5-5.17.1
• dependabot/go_modules/github.com/go-jose/go-jose/v4-4.1.4
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.27.4
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.28.1
• dependabot/go_modules/github.com/onsi/gomega-1.39.0
• dependabot/go_modules/github.com/onsi/gomega-1.39.1
• dependabot/go_modules/github.com/sigstore/cosign/v2-2.6.2
• dependabot/go_modules/github.com/sigstore/fulcio-1.8.5
• dependabot/go_modules/github.com/sigstore/rekor-1.5.0
• dependabot/go_modules/github.com/sigstore/sigstore-1.10.4
• dependabot/go_modules/github.com/theupdateframework/go-tuf/v2-2.4.1
• dependabot/go_modules/go.opendefense.cloud/kit-0.1.5
• dependabot/go_modules/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc-1.39.0
• dependabot/go_modules/go.opentelemetry.io/otel/sdk/metric-1.39.0
• dependabot/go_modules/google.golang.org/grpc-1.77.0
• dependabot/go_modules/google.golang.org/grpc-1.78.0
• dependabot/go_modules/google.golang.org/grpc-1.79.3
• dependabot/go_modules/ocm.software/ocm-0.35.0
• dependabot/go_modules/sigs.k8s.io/structured-merge-diff/v6-6.3.1
• dependabot/go_modules/sigs.k8s.io/structured-merge-diff/v6-6.3.2
• docs/165-registry-credentials-poc
• feat/035-webhook-server
• feat/043-generic-webhook
• feat/104-add-helm-chart-for-solar
• feat/154-rendering-backoff
• feat/176-integrate-library
• feat/185-consider-profiles-in-hydrated-target
• feat/185-profile-integs
• feat/212-webhook-router-unregister-handler
• feat/242-add-unique-name-to-release-api
• feat/243-release-priority
• feat/244-add-anti-affinity-fields-to-release-api
• feat/246-implement-release-resolver
• feat/254-ca-support-discovery
• feat/28-solar-client-options
• feat/32-implement-solar-discovery-controller
• feat/34-define-solar-discovery-worker-event-types
• feat/37-implement-ocm-qualifier-pipeline-step
• feat/38-componenthandler-with-support-for-helm
• feat/40-check-if-componentversion-needs-updates
• feat/440-rendering-secrets
• feat/490-reference-grants
• feat/84-table-converter
• feat/97-populate-secret-properly
• feat/98-create-service-for-discovery-pod
• feat/99-integs-discovery
• feat/implement-deletion-protection
• feat/improve-dev-flow
• feat/integ-test-namespace
• feat/ocm-access-types-discovery
• feat/standalone-discovery
• feat/target-split
• feat/ui-experiment
• feature/100-test-release-rendering-v2
• feature/101-target-e2e-test
• feature/102-deployment-e2e-test
• feature/103-implement-dev-cluster
• feature/13-update-stale-common.mk
• feature/160-cleanup-failed-rendertask-jobs
• feature/184-secret-reference
• feature/196-add-router-tests
• feature/231-rename-registryURL
• feature/239-release-targetnamespace
• feature/239-release-targetnamespace-2
• feature/240-add-custom-ca-support-for-rendertasks
• feature/259-adjust-zot-webhooks
• feature/259-adjust-zot-webhooks-e2e-test
• feature/259-adjust-zot-webhooks-v2
• feature/288-rename-hydrated-target
• feature/315-rendertask-as-clusterwide-ressource
• feature/33-pin-gh-actions
• feature/358-artifact-cleanup
• feature/481-include-e2e-in-ci
• feature/557-codegen-ci
• feature/568-strict-mode-rb-e2e-tests
• feature/api-surface
• feature/componentversion-writer
• feature/hydrated-target-controller
• feature/hydrated-target-renderer
• feature/publish-renderer-image
• feature/release-controller
• feature/render-release-job
• feature/rendertask-controller
• feature/track-e2e-dependencies
• feature/use-flake
• fix/101-target-e2e-test
• fix/155-remove-polling-II
• fix/155-remove-polling-and-finalizers
• fix/155-remove-polling-render-jobs
• fix/205-fix-license-headers
• fix/236-delete-event-fails
• fix/260-rendertask-basic-auth
• fix/268-reg-creds-in-discovery-handler
• fix/275-incomplete-write-api-resource-event
• fix/285-creds-scanner
• fix/316-release-deployment
• fix/319-processing-second-discovery-event
• fix/366-api-ref-list-types
• fix/374-false-positive-deletion
• fix/535-non-ocm-discovery-errors
• fix/536-discover-root-level-components
• fix/91-discoveryreconciler-does-not-remove-secrets
• fix/add-missing-target-permission
• fix/bootstrap-input-unique-name-key
• fix/certificate-e2e-tests
• fix/discovery-integs-steps-order
• fix/e2e-ci-mode
• fix/errors-during-controller-tests
• fix/fix-e2e-test-componentversion-version
• fix/golang-gh-action
• fix/golangci-lint-with-go-26-1
• fix/json-key-release-type
• fix/missing-return-discovery-finalization
• fix/namespace-discovery-worker
• fix/osv-scanner-pypi
• fix/pipeline-errors
• fix/rbac-declaration-events
• fix/re-fetch-config-secret-after-creation
• fix/refactor-without-clientset
• fix/registry-credentials
• fix/render-artifact-terminating
• fixup/160-fix-cleanup-and-add-tests
• main
• prototype-implementation
• quickfix/api-violations-list-type-conditions
• renovate/actions-checkout-7.x
• renovate/all-minor-updates
• renovate/all-patch-and-digest-updates
• renovate/all-patch-updates
• renovate/configure
• renovate/ginkgo-2.x
• renovate/github.com-cenkalti-backoff-v4-5.x
• renovate/github.com-cenkalti-backoff-v5-6.x
• renovate/github.com-google-go-containerregistry-0.x
• renovate/github.com-mandelsoft-goutils-digest
• renovate/github.com-onsi-ginkgo-v2-2.x
• renovate/github.com-onsi-gomega-1.x
• renovate/go-version
• renovate/go.opendefense.cloud-kit-0.x
• renovate/go.opendefense.cloud-ocm-kit-0.x
• renovate/go.uber.org-zap-1.x
• renovate/golang-1.x
• renovate/golang.org-x-time-0.x
• renovate/golangci-golangci-lint-action-digest
• renovate/google-osv-scanner-action-digest
• renovate/helm.sh-helm-v3-4.x
• renovate/helm.sh-helm-v4-4.x
• renovate/k8s.io-kube-openapi-digest
• renovate/k8s.io-utils-digest
• renovate/kubernetes-go
• renovate/kubernetes-monorepo
• renovate/ocm-0.x
• renovate/ocm.software-ocm-0.x
• renovate/osv-scanner-2.x
• renovate/quay.io-coreos-etcd-3.x
• renovate/sigs.k8s.io-controller-runtime-0.x
• renovate/sigs.k8s.io-structured-merge-diff-v6-6.x
• revert-370-renovate/go-version
• spike/314-reference-grant-poc
• test/coveralls
• tests/fix-coverage-filter-and-add-some-coverage

Build # 27757069332

Build Type

Pull #625

github

Committed by web-flow

Commit Message

Merge e5977de32 into 8ad8e9940

Pull Request Pull Request #625: ci: harden GitHub workflows

Coverage Stats

3602 of 4705 relevant lines covered (76.56%)

34.71 hits per line