Skip to content

Commit 396bd7b

Browse files
vsantosvsantos
committed
merge main
Signed-off-by: Victor Santos <vsantos.py@gmail.com>
2 parents 6007858 + 7343875 commit 396bd7b

147 files changed

Lines changed: 7944 additions & 944 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.github/workflows/ci.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -46,10 +46,10 @@ jobs:
4646

4747
steps:
4848
- name: Checkout
49-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
49+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
5050

5151
- name: Setup Go
52-
uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
52+
uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
5353
id: setup-go
5454
with:
5555
go-version-file: "go.mod"
@@ -72,10 +72,10 @@ jobs:
7272

7373
steps:
7474
- name: Checkout
75-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
75+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
7676

7777
- name: Setup Go
78-
uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
78+
uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
7979
id: setup-go
8080
with:
8181
go-version-file: "go.mod"
@@ -100,13 +100,13 @@ jobs:
100100

101101
steps:
102102
- name: Checkout
103-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
103+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
104104

105105
- name: Fetch History
106106
run: git fetch --prune --unshallow
107107

108108
- name: Setup Go
109-
uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
109+
uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
110110
id: setup-go
111111
with:
112112
go-version-file: "go.mod"
@@ -126,7 +126,7 @@ jobs:
126126
make test
127127
128128
- name: Publish Unit Test Coverage
129-
uses: codecov/codecov-action@125fc84a9a348dbcf27191600683ec096ec9021c # v4.4.1
129+
uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 # v4.5.0
130130
env:
131131
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
132132
with:

‎.github/workflows/dlc.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414
runs-on: ubuntu-latest
1515
steps:
1616
- name: "Checkout Code"
17-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
17+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
1818

1919
- name: "Run FOSSA Scan"
2020
uses: fossas/fossa-action@47ef11b1e1e3812e88dae436ccbd2d0cbd1adab0 # main

‎.github/workflows/docs.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,12 +15,12 @@ jobs:
1515
permissions:
1616
contents: write
1717
steps:
18-
- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
18+
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
1919
with:
2020
fetch-depth: 0
2121

2222
- name: Setup Go
23-
uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
23+
uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
2424
with:
2525
go-version-file: "go.mod"
2626

‎.github/workflows/e2e-managed.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,7 @@ jobs:
6464

6565
# Check out merge commit
6666
- name: Fork based /ok-to-test-managed checkout
67-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
67+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
6868
with:
6969
ref: 'refs/pull/${{ env.GITHUB_PR_NUMBER }}/merge'
7070

‎.github/workflows/e2e.yml‎

Lines changed: 36 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,10 @@ on:
66

77
permissions:
88
contents: read
9-
9+
issues: write
10+
pull-requests: write
11+
checks: write
12+
statuses: read
1013
name: e2e tests
1114

1215
env:
@@ -20,6 +23,7 @@ env:
2023
# Common users. We can't run a step 'if secrets.GHCR_USERNAME != ""' but we can run
2124
# a step 'if env.GHCR_USERNAME' != ""', so we copy these to succinctly test whether
2225
# credentials have been provided before trying to run steps that need them.
26+
TARGET_SHA: ${{ github.event.client_payload.slash_command.args.named.sha }}
2327
GHCR_USERNAME: ${{ secrets.GHCR_USERNAME }}
2428
GCP_SM_SA_JSON: ${{ secrets.GCP_SM_SA_JSON}}
2529
GCP_GKE_ZONE: ${{ secrets.GCP_GKE_ZONE}}
@@ -35,7 +39,7 @@ env:
3539
TFC_AZURE_TENANT_ID: ${{ secrets.TFC_AZURE_TENANT_ID}}
3640
TFC_AZURE_SUBSCRIPTION_ID: ${{ secrets.TFC_AZURE_SUBSCRIPTION_ID }}
3741
TFC_VAULT_URL: ${{ secrets.TFC_VAULT_URL}}
38-
42+
3943
SCALEWAY_API_URL: ${{ secrets.SCALEWAY_API_URL }}
4044
SCALEWAY_REGION: ${{ secrets.SCALEWAY_REGION }}
4145
SCALEWAY_PROJECT_ID: ${{ secrets.SCALEWAY_PROJECT_ID }}
@@ -46,6 +50,10 @@ env:
4650
DELINEA_TENANT: ${{ secrets.DELINEA_TENANT }}
4751
DELINEA_CLIENT_ID: ${{ secrets.DELINEA_CLIENT_ID }}
4852
DELINEA_CLIENT_SECRET: ${{ secrets.DELINEA_CLIENT_SECRET }}
53+
54+
SECRETSERVER_USERNAME: ${{ secrets.SECRETSERVER_USERNAME }}
55+
SECRETSERVER_PASSWORD: ${{ secrets.SECRETSERVER_PASSWORD }}
56+
SECRETSERVER_URL: ${{ secrets.SECRETSERVER_URL }}
4957
jobs:
5058

5159
integration-trusted:
@@ -58,7 +66,7 @@ jobs:
5866
steps:
5967

6068
- name: Branch based PR checkout
61-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
69+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
6270

6371
- name: Fetch History
6472
run: git fetch --prune --unshallow
@@ -77,15 +85,20 @@ jobs:
7785

7886
# Check out merge commit
7987
- name: Fork based /ok-to-test checkout
80-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
88+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
8189
with:
82-
ref: 'refs/pull/${{ github.event.client_payload.pull_request.number }}/merge'
90+
ref: '${{ env.TARGET_SHA }}'
8391

8492
- name: Fetch History
8593
run: git fetch --prune --unshallow
8694

87-
- uses: ./.github/actions/e2e
88-
95+
- id: e2e
96+
uses: ./.github/actions/e2e
97+
- id: create_token
98+
uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
99+
with:
100+
app_id: ${{ secrets.APP_ID }}
101+
private_key: ${{ secrets.PRIVATE_KEY }}
89102
# Update check run called "integration-fork"
90103
- uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
91104
id: update-check-run
@@ -119,3 +132,19 @@ jobs:
119132
conclusion: process.env.conclusion
120133
});
121134
return result;
135+
- name: Update on Succeess
136+
if: always() && steps.e2e.conclusion == 'success'
137+
uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
138+
with:
139+
token: ${{ steps.create_token.outputs.token }}
140+
issue-number: ${{ github.event.client_payload.pull_request.number }}
141+
body: |
142+
[Bot] - :white_check_mark: [e2e for ${{ env.TARGET_SHA }} passed](https://github.com/external-secrets/external-secrets/actions/runs/${{ github.run_id }})
143+
- name: Update on Failure
144+
if: always() && steps.e2e.conclusion != 'success'
145+
uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
146+
with:
147+
token: ${{ steps.create_token.outputs.token }}
148+
issue-number: ${{ github.event.client_payload.pull_request.number }}
149+
body: |
150+
[Bot] - :x: [e2e for ${{ env.TARGET_SHA }} failed](https://github.com/external-secrets/external-secrets/actions/runs/${{ github.run_id }})

‎.github/workflows/helm.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
runs-on: ubuntu-latest
2323
steps:
2424
- name: Checkout
25-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
25+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
2626
with:
2727
fetch-depth: 0
2828

@@ -34,7 +34,7 @@ jobs:
3434
with:
3535
version: v3.14.2 # remember to also update for the second job (release)
3636

37-
- uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
37+
- uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
3838
with:
3939
python-version: 3.7
4040

@@ -74,7 +74,7 @@ jobs:
7474
runs-on: ubuntu-latest
7575
steps:
7676
- name: Checkout
77-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
77+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
7878
with:
7979
fetch-depth: 0
8080

@@ -119,7 +119,7 @@ jobs:
119119
version: v3.14.2 # remember to also update for the first job (lint-and-test)
120120

121121
- name: Login to GHCR
122-
uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
122+
uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
123123
with:
124124
registry: ghcr.io
125125
username: ${{ github.actor }}

‎.github/workflows/publish.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -50,23 +50,23 @@ jobs:
5050
steps:
5151

5252
- name: Checkout
53-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
53+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
5454
with:
5555
ref: ${{ inputs.ref }}
5656

5757
- name: Setup QEMU
58-
uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0
58+
uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0
5959
with:
6060
platforms: all
6161

6262
- name: Setup Docker Buildx
63-
uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # v3.3.0
63+
uses: docker/setup-buildx-action@aa33708b10e362ff993539393ff100fa93ed6a27 # v3.5.0
6464
with:
6565
version: 'v0.4.2'
6666
install: true
6767

6868
- name: Setup Go
69-
uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
69+
uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
7070
id: setup-go
7171
with:
7272
go-version-file: "go.mod"
@@ -80,7 +80,7 @@ jobs:
8080
run: git fetch --prune --unshallow
8181

8282
- name: Login to Docker
83-
uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
83+
uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
8484
if: env.IS_FORK == 'false'
8585
with:
8686
registry: ghcr.io
@@ -126,7 +126,7 @@ jobs:
126126
run: make docker.build
127127

128128
- name: Run Trivy vulnerability scanner
129-
uses: aquasecurity/trivy-action@595be6a0f6560a0a8fc419ddf630567fc623531d # master
129+
uses: aquasecurity/trivy-action@6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8 # master
130130
with:
131131
image-ref: ${{ inputs.image-name }}:${{ steps.container_info.outputs.image-tag }}
132132
format: 'table'
@@ -140,7 +140,7 @@ jobs:
140140
needs: build-publish
141141
steps:
142142
- name: Checkout
143-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
143+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
144144
- name: Sign image
145145
if: env.IS_FORK == 'false'
146146
uses: ./.github/actions/sign

‎.github/workflows/rebuild-image.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020

2121
steps:
2222
- name: Checkout
23-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
23+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
2424
with:
2525
fetch-depth: 0
2626
ref: ${{ github.event.inputs.ref }}

‎.github/workflows/release.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -22,13 +22,13 @@ jobs:
2222

2323
steps:
2424
- name: Checkout
25-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
25+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
2626
with:
2727
fetch-depth: 0
2828
ref: ${{ github.event.inputs.source_ref }}
2929

3030
- name: Create Release
31-
uses: softprops/action-gh-release@69320dbe05506a9a39fc8ae11030b214ec2d1f87 # v2.0.5
31+
uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191 # v2.0.8
3232
with:
3333
tag_name: ${{ github.event.inputs.version }}
3434
target_commitish: ${{ github.event.inputs.source_ref }}
@@ -71,12 +71,12 @@ jobs:
7171

7272
steps:
7373
- name: Checkout
74-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
74+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
7575
with:
7676
fetch-depth: 0
7777

7878
- name: Setup Go
79-
uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
79+
uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
8080
id: setup-go
8181
with:
8282
go-version-file: "go.mod"
@@ -86,7 +86,7 @@ jobs:
8686
run: go mod download
8787

8888
- name: Login to Docker
89-
uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
89+
uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
9090
with:
9191
registry: ghcr.io
9292
username: ${{ secrets.GHCR_USERNAME }}
@@ -113,7 +113,7 @@ jobs:
113113
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
114114

115115
- name: Update Release
116-
uses: softprops/action-gh-release@69320dbe05506a9a39fc8ae11030b214ec2d1f87 # v2.0.5
116+
uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191 # v2.0.8
117117
with:
118118
tag_name: ${{ github.event.inputs.version }}
119119
files: |

‎.github/workflows/scorecard.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -20,19 +20,19 @@ jobs:
2020

2121
steps:
2222
- name: "Checkout code"
23-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
23+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
2424
with:
2525
persist-credentials: false
2626

2727
- name: "Run analysis"
28-
uses: ossf/scorecard-action@dc50aa9510b46c811795eb24b2f1ba02a914e534 # v2.3.3
28+
uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
2929
with:
3030
results_file: results.sarif
3131
results_format: sarif
3232
publish_results: true
3333

3434
# Upload the results to GitHub's code scanning dashboard.
3535
- name: "Upload to code-scanning"
36-
uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
36+
uses: github/codeql-action/upload-sarif@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15
3737
with:
3838
sarif_file: results.sarif

0 commit comments

Comments
 (0)