summaryrefslogtreecommitdiff
path: root/.github/workflows/image-scan.yml
AgeCommit message (Collapse)Author
2025-04-12deps(actions): Bump aquasecurity/setup-trivy from 0.2.2 to 0.2.3 (#2363)dependabot[bot]
Bumps [aquasecurity/setup-trivy](https://github.com/aquasecurity/setup-trivy) from 0.2.2 to 0.2.3. - [Release notes](https://github.com/aquasecurity/setup-trivy/releases) - [Commits](https://github.com/aquasecurity/setup-trivy/compare/v0.2.2...v0.2.3) --- updated-dependencies: - dependency-name: aquasecurity/setup-trivy dependency-version: 0.2.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-09chore(ci): Run all workflows in concurrency groups, and cancel in-progress ↵Dave Henderson
for efficiency (#2346) Signed-off-by: Dave Henderson <dhenderson@gmail.com>
2024-11-09ci(trivy): Avoid rate-limiting by using CLI directly (#2253)Dave Henderson
Signed-off-by: Dave Henderson <dhenderson@gmail.com>
2024-05-30ci: fix image-scan job nameDave Henderson
Signed-off-by: Dave Henderson <dhenderson@gmail.com>
2024-05-10build: attempt to fix trivy action config (#2061)Dave Henderson
* build: attempt to fix trivy action config Signed-off-by: Dave Henderson <dhenderson@gmail.com> * build: remove cc-test-reporter call Signed-off-by: Dave Henderson <dhenderson@gmail.com> --------- Signed-off-by: Dave Henderson <dhenderson@gmail.com>
2023-12-18Build(deps): Bump github/codeql-action from 2 to 3 (#1945)dependabot[bot]
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v2...v3) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-09Build(deps): Bump actions/checkout from 3 to 4 (#1834)dependabot[bot]
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v3...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-18change 'master' references to 'main'Dave Henderson
Signed-off-by: Dave Henderson <dhenderson@gmail.com>
2022-06-12Fix builds not getting triggered on pushes to tagsDave Henderson
Signed-off-by: Dave Henderson <dhenderson@gmail.com>
2022-05-27Stop overriding GOPATHDave Henderson
Signed-off-by: Dave Henderson <dhenderson@gmail.com>
2022-05-27Bump actions/checkout from 1 to 2.4.0dependabot[bot]
Bumps [actions/checkout](https://github.com/actions/checkout) from 1 to 2.4.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v1...v2.4.0) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-02Bump github/codeql-action from 1 to 2dependabot[bot]
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 to 2. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v1...v2) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2022-04-26Fix GHA workflow triggersDave Henderson
Signed-off-by: Dave Henderson <dhenderson@gmail.com>
2022-03-22Various updates for Go 1.18Dave Henderson
Signed-off-by: Dave Henderson <dhenderson@gmail.com>
2021-05-01Scan with trivy in CI (#1149)Dave Henderson
Signed-off-by: Dave Henderson <dhenderson@gmail.com>