992 Commits

Author SHA1 Message Date
dependabot[bot]
ea92b18afb
chore(deps): Bump @docker/actions-toolkit from 0.1.0 to 0.2.0
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.1.0 to 0.2.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.1.0...v0.2.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-19 11:56:57 +00:00
dependabot[bot]
6f91eb31f7
chore(deps): Bump docker/bake-action from 2 to 3
Bumps [docker/bake-action](https://github.com/docker/bake-action) from 2 to 3.
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/bake-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-18 11:56:41 +00:00
CrazyMax
eafaea8d0f
Merge pull request #855 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.1.0
chore(deps): Bump @docker/actions-toolkit from 0.1.0-beta.19 to 0.1.0
2023-04-17 08:07:44 +02:00
CrazyMax
ddd2a92197
update generated content
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-04-17 02:10:24 +02:00
CrazyMax
a54198e85a
use new implementation from toolkit
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-04-17 02:09:47 +02:00
CrazyMax
7e3a79c50d
update dev dependencies
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-04-17 02:09:47 +02:00
dependabot[bot]
4a730ce64b
chore(deps): Bump @docker/actions-toolkit from 0.1.0-beta.19 to 0.1.0
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.1.0-beta.19 to 0.1.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.1.0-beta.19...v0.1.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-11 11:57:09 +00:00
CrazyMax
817ed59f97
Merge pull request #837 from crazy-max/update-workflows
ci: split validate and test workflow
2023-04-11 09:44:56 +02:00
CrazyMax
a3646c08f8
test: update go example
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-04-10 00:13:50 +02:00
CrazyMax
5c3465b033
ci: merge example workflow to ci one
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-04-10 00:13:50 +02:00
CrazyMax
e9c0697e5b
ci: virtual-env workflow moved to actions-toolkit repo
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-04-10 00:13:50 +02:00
CrazyMax
e090350180
ci: split validate and test workflow
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-04-10 00:13:49 +02:00
CrazyMax
f2a1d5e99d
Merge pull request #838 from docker/dependabot/npm_and_yarn/docker/actions-toolkit-0.1.0-beta.19
chore(deps): Bump @docker/actions-toolkit from 0.1.0-beta.14 to 0.1.0-beta.19
2023-03-13 08:49:57 +00:00
CrazyMax
81f5252b54
update generated content
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-03-12 23:37:34 +01:00
CrazyMax
b3435979d1
use methods from toolkit to handle provenance attrs
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-03-12 23:37:34 +01:00
dependabot[bot]
80def7c74e
chore(deps): Bump @docker/actions-toolkit
Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.1.0-beta.14 to 0.1.0-beta.19.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.1.0-beta.14...v0.1.0-beta.19)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-03-12 21:49:46 +00:00
CrazyMax
35434f557a
Merge pull request #809 from crazy-max/test-named-context
ci: named context jobs
2023-02-27 15:58:24 +01:00
CrazyMax
d63c96254b
Merge pull request #811 from crazy-max/switch-toolkit
switch to actions-toolkit implementation
2023-02-24 19:15:59 +01:00
CrazyMax
21fe05ff59
Merge pull request #818 from crazy-max/fix-docs-links
docs: fix links
2023-02-24 14:46:55 +01:00
CrazyMax
097a3e23ac
update generated content
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-02-24 10:22:20 +01:00
CrazyMax
d8823bfaed
switch to actions-toolkit implementation
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-02-24 10:22:19 +01:00
CrazyMax
3a3620ed49
docs: fix links
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-02-23 17:16:49 +01:00
CrazyMax
8082ebc6ea
ci: named context jobs
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-02-23 14:06:53 +01:00
Justin Chadwell
a3ae207c14
Merge pull request #815 from jedevc/e2e-distribution-fixup
fixup! e2e: add distribution tests
2023-02-22 12:50:28 +00:00
Justin Chadwell
4858a31f84 fixup! e2e: add distribution tests
Signed-off-by: Justin Chadwell <me@jedevc.com>
2023-02-22 12:40:15 +00:00
Justin Chadwell
d10433366f
Merge pull request #814 from jedevc/e2e-distribution
e2e: add distribution tests
2023-02-22 12:19:02 +00:00
Justin Chadwell
ee5cabd9e3 e2e: add distribution tests
Signed-off-by: Justin Chadwell <me@jedevc.com>
2023-02-22 11:55:00 +00:00
CrazyMax
7944f9a25b
Merge pull request #796 from docker/dependabot/npm_and_yarn/csv-parse-5.3.5
chore(deps): Bump csv-parse from 5.3.4 to 5.3.5
2023-02-16 14:13:36 +01:00
CrazyMax
c088e12d82
Merge pull request #804 from docker/registry-artifactory
ci: add artifactory container registry to test against
2023-02-15 19:26:39 +01:00
CrazyMax
e941dc0149
Merge pull request #805 from crazy-max/e2e-update-quay
e2e: update quay namespace
2023-02-15 19:25:25 +01:00
CrazyMax
0d6f3e8936
e2e: update quay namespace
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-02-15 19:23:19 +01:00
Justin Chadwell
c779d8500d ci: add artifactory container registry to test against
The artifactory container registry is configured to accept schema 2
manifests.

Signed-off-by: Justin Chadwell <me@jedevc.com>
2023-02-15 10:48:45 +00:00
CrazyMax
b651cf69a6
Merge pull request #802 from docker/dependabot/github_actions/crazy-max/ghaction-dump-context-2
chore(deps): Bump crazy-max/ghaction-dump-context from 1 to 2
2023-02-13 13:10:23 +01:00
dependabot[bot]
0db6129a57
chore(deps): Bump crazy-max/ghaction-dump-context from 1 to 2
Bumps [crazy-max/ghaction-dump-context](https://github.com/crazy-max/ghaction-dump-context) from 1 to 2.
- [Release notes](https://github.com/crazy-max/ghaction-dump-context/releases)
- [Changelog](https://github.com/crazy-max/ghaction-dump-context/blob/master/CHANGELOG.md)
- [Commits](https://github.com/crazy-max/ghaction-dump-context/compare/v1...v2)

---
updated-dependencies:
- dependency-name: crazy-max/ghaction-dump-context
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-02-13 11:57:09 +00:00
CrazyMax
70cc701b9c
Merge pull request #800 from crazy-max/e2e-local
e2e: local harbor and nexus
2023-02-10 17:36:20 +01:00
CrazyMax
af7537dc3e
e2e: local nexus
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-02-10 06:18:22 +01:00
CrazyMax
2d8166c4b9
e2e: local harbor
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-02-10 04:45:30 +01:00
CrazyMax
6a8fbf0dbc
Merge pull request #799 from crazy-max/e2e-quay
e2e: quay.io
2023-02-09 13:09:47 +01:00
CrazyMax
f74fd039f3
e2e: input to set additional tag
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-02-09 12:53:34 +01:00
CrazyMax
695ee8547d
e2e: quay.io
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-02-09 12:06:55 +01:00
Justin Chadwell
fd7264830a
Merge pull request #798 from docker/e2e-enable-debug
e2e: enable buildkit container logs
2023-02-08 13:16:49 +00:00
Justin Chadwell
6842956e83 e2e: enable buildkit container logs
Signed-off-by: Justin Chadwell <me@jedevc.com>
2023-02-08 12:27:02 +00:00
CrazyMax
9d1b8fa4e2
Merge pull request #797 from crazy-max/e2e-rm-harbor
e2e: remove harbor
2023-02-08 13:14:41 +01:00
CrazyMax
17c742ea85
e2e: remove harbor
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-02-08 13:10:54 +01:00
dependabot[bot]
916f6873ae
chore(deps): Bump csv-parse from 5.3.4 to 5.3.5
Bumps [csv-parse](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-parse) from 5.3.4 to 5.3.5.
- [Release notes](https://github.com/adaltas/node-csv/releases)
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-parse/CHANGELOG.md)
- [Commits](https://github.com/adaltas/node-csv/commits/csv-parse@5.3.5/packages/csv-parse)

---
updated-dependencies:
- dependency-name: csv-parse
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-02-08 11:02:07 +00:00
CrazyMax
a3f7a443f9
Merge pull request #787 from docker/dependabot/npm_and_yarn/csv-parse-5.3.4
chore(deps): Bump csv-parse from 5.3.3 to 5.3.4
2023-02-06 17:25:28 +01:00
CrazyMax
05e89e68aa
Merge pull request #790 from crazy-max/e2e-harbor
e2e: harbor
2023-02-06 14:29:57 +01:00
CrazyMax
d16cc0b66f
e2e: harbor
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-02-02 13:42:15 +01:00
dependabot[bot]
306a0a9f50
chore(deps): Bump csv-parse from 5.3.3 to 5.3.4
Bumps [csv-parse](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-parse) from 5.3.3 to 5.3.4.
- [Release notes](https://github.com/adaltas/node-csv/releases)
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-parse/CHANGELOG.md)
- [Commits](https://github.com/adaltas/node-csv/commits/csv-parse@5.3.4/packages/csv-parse)

---
updated-dependencies:
- dependency-name: csv-parse
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-02-01 11:02:18 +00:00
CrazyMax
55a3485913
Merge pull request #785 from crazy-max/update-version
docs: update version to v4
2023-01-30 19:33:53 +01:00
CrazyMax
71e9aaaf29
docs: update version to v4
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-30 19:30:24 +01:00
CrazyMax
3b5e8027fc
Merge pull request #784 from crazy-max/enable-provenance
revert disable provenance by default if not set
v4.0.0
2023-01-30 19:25:07 +01:00
CrazyMax
02d3266a89
update generated content
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-30 19:23:01 +01:00
CrazyMax
f403dafe18
revert disable provenance by default if not set
This partially reverts 337a09d182ee8c86aa958168dc985219e49e4b3b but
keeps the newly added tests.

Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-30 19:23:00 +01:00
CrazyMax
1104d47137
Merge pull request #781 from crazy-max/disable-provenance
Disable provenance by default if not set
v3.3.1 v3
2023-01-30 19:07:44 +01:00
CrazyMax
838bf90c88
update generated content
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-30 10:15:05 +01:00
CrazyMax
337a09d182
disable provenance by default if not set
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-30 10:15:05 +01:00
CrazyMax
37abcedcc1
Merge pull request #760 from crazy-max/test-envs
test: move envs to jest config
v3.3.0
2023-01-13 13:27:37 +01:00
CrazyMax
67109bc4b2
test: move envs to jest config
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-13 13:23:43 +01:00
CrazyMax
d1b0eb0a29
Merge pull request #759 from crazy-max/fix-provenance-input
Fix provenance input
2023-01-13 13:06:45 +01:00
CrazyMax
a0635fe7cd
update generated content
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-13 12:59:31 +01:00
CrazyMax
f834265449
tests for provenance
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-13 12:59:31 +01:00
CrazyMax
0191543e0b
fix provenance input
When `provenance: false`, we should not set the builder-id.

Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-13 12:59:31 +01:00
CrazyMax
2a16835223
Merge pull request #758 from crazy-max/revert-736
Revert build-args newline split
2023-01-13 11:35:45 +01:00
CrazyMax
9b96801525
Revert build-args newline split
This reverts commit 6afac853c9cffda7a22e6c3b59553f3c4a4d3585, reversing
changes made to 1d910c8aa2fa4312431b341b7f8eb4600879973c.

Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-13 11:27:13 +01:00
CrazyMax
6afac853c9
Merge pull request #736 from ruslandoga/build-args-newline-split
build-args newline split
2023-01-13 10:03:35 +01:00
ruslandoga
3bfdd83cd7 pre-checkin
Signed-off-by: ruslandoga <67764432+ruslandoga@users.noreply.github.com>
2023-01-13 15:15:03 +07:00
ruslandoga
316d5eb8b3 build-args newline split
Signed-off-by: ruslandoga <67764432+ruslandoga@users.noreply.github.com>
2023-01-13 12:51:11 +07:00
CrazyMax
1d910c8aa2
Merge pull request #707 from crazy-max/gh-runtime-token-info
Log GitHub Actions runtime token access controls
2023-01-12 19:50:31 +01:00
CrazyMax
f9ccca010f
log GitHub Actions runtime token access controls
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-12 19:44:24 +01:00
CrazyMax
c40bf0fdf6
Merge pull request #746 from crazy-max/attests-sbom-provenance-inputs
add attests, provenance and sbom inputs
2023-01-12 19:27:54 +01:00
CrazyMax
223ed1ebd4
ci: fix registry-cache job
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-11 15:56:26 +01:00
CrazyMax
fdafae777b
update generated content
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-11 15:56:25 +01:00
CrazyMax
0cb700ffba
do not set default provenance if user wants to load the image
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-11 15:56:25 +01:00
CrazyMax
ee7989df81
always set builder-id attribute for provenance
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-11 15:56:25 +01:00
CrazyMax
74f883a069
check BuildKit compatibility before setting default provenance opts
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-11 15:56:25 +01:00
CrazyMax
0149503e26
ci: inspect with json output
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-11 15:56:25 +01:00
CrazyMax
26ce4f3617
provenance: set mode max and builder-id for public repos by default
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-11 15:56:24 +01:00
CrazyMax
ed2672fc33
add attests, provenance and sbom inputs
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-11 15:56:24 +01:00
CrazyMax
472ccddef1
test: go project sample
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2023-01-11 15:56:24 +01:00
CrazyMax
d235d2d5ea
Merge pull request #749 from docker/dependabot/npm_and_yarn/json5-2.2.3
chore(deps): Bump json5 from 2.2.0 to 2.2.3
2023-01-08 18:32:06 +01:00
dependabot[bot]
2f519a7883
chore(deps): Bump json5 from 2.2.0 to 2.2.3
Bumps [json5](https://github.com/json5/json5) from 2.2.0 to 2.2.3.
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](https://github.com/json5/json5/compare/v2.2.0...v2.2.3)

---
updated-dependencies:
- dependency-name: json5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-01-07 04:56:41 +00:00
CrazyMax
4eb68bb2ac
Merge pull request #729 from docker/dependabot/npm_and_yarn/csv-parse-5.3.3
chore(deps): Bump csv-parse from 5.3.0 to 5.3.3
2022-12-19 20:44:37 +01:00
CrazyMax
b4755849f0
update generated content
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2022-12-19 20:42:49 +01:00
dependabot[bot]
ade1a6afe3
chore(deps): Bump csv-parse from 5.3.0 to 5.3.3
Bumps [csv-parse](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-parse) from 5.3.0 to 5.3.3.
- [Release notes](https://github.com/adaltas/node-csv/releases)
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-parse/CHANGELOG.md)
- [Commits](https://github.com/adaltas/node-csv/commits/csv-parse@5.3.3/packages/csv-parse)

---
updated-dependencies:
- dependency-name: csv-parse
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-12-19 19:37:51 +00:00
CrazyMax
21d6059e1e
Merge pull request #732 from docker/dependabot/npm_and_yarn/minimatch-3.1.2
chore(deps): Bump minimatch from 3.0.4 to 3.1.2
2022-12-19 20:20:03 +01:00
CrazyMax
c2c50190db
readme: fix badges
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2022-12-19 20:17:23 +01:00
CrazyMax
a154a68da0
Update generated content
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2022-12-19 20:15:46 +01:00
dependabot[bot]
4ac90f5dca
chore(deps): Bump minimatch from 3.0.4 to 3.1.2
Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.0.4 to 3.1.2.
- [Release notes](https://github.com/isaacs/minimatch/releases)
- [Commits](https://github.com/isaacs/minimatch/compare/v3.0.4...v3.1.2)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-29 17:55:45 +00:00
CrazyMax
175d02bffe
Merge pull request #723 from crazy-max/docs-fix-link
docs: fix link
2022-11-10 18:25:38 +01:00
CrazyMax
546378e7fb
docs: fix link
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2022-11-10 15:57:59 +01:00
CrazyMax
ffe65bfc27
Merge pull request #718 from crazy-max/moved-examples
docs: examples moved to docs website
2022-11-04 14:11:17 +01:00
CrazyMax
d4c14fd006
docs: examples moved to docs website
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2022-11-04 09:17:25 +01:00
CrazyMax
6e95f19fb8
Merge pull request #708 from kaznovac/patch-1
[docs] test-before-push: push tested image as latest
2022-10-20 21:05:58 +02:00
Marko Kaznovac
2a752d5a63
[docs] test-before-push: push tested image as latest
also renamed image name from `myapp` -> `app`

Signed-off-by: Marko Kaznovac <kaznovac@users.noreply.github.com>
2022-10-20 16:03:06 +02:00
CrazyMax
c56af95754
Merge pull request #704 from crazy-max/setOutput
Remove workaround for setOutput
v3.2.0
2022-10-12 08:33:54 +02:00
CrazyMax
75aaa63262
Remove workaround for setOutput
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2022-10-12 06:56:31 +02:00
CrazyMax
f97d6e2850
Merge pull request #700 from crazy-max/update-docs
docs: update links and layout
2022-10-11 12:07:35 +02:00
CrazyMax
47c00d78bf
ci: secret job to check for invalid secrets
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2022-10-09 17:42:47 +02:00
CrazyMax
871b930e7a
docs: update links and layout
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2022-10-07 19:28:55 +02:00