forked from cert-manager/cert-manager
-
Notifications
You must be signed in to change notification settings - Fork 3
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #35 from gravitational/taras/v1.15.3
[v1.15.3] Sync with upstream
- Loading branch information
Showing
442 changed files
with
14,131 additions
and
8,222 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,31 @@ | ||
| # THIS FILE IS AUTOMATICALLY GENERATED. DO NOT EDIT. | ||
| # Edit https://github.com/cert-manager/makefile-modules/blob/main/modules/go/base/.github/workflows/govulncheck.yaml instead. | ||
|
|
||
| # Run govulncheck at midnight every night on the main branch, | ||
| # to alert us to recent vulnerabilities which affect the Go code in this | ||
| # project. | ||
| name: govulncheck | ||
| on: | ||
| workflow_dispatch: {} | ||
| schedule: | ||
| - cron: '0 0 * * *' | ||
|
|
||
| permissions: | ||
| contents: read | ||
|
|
||
| jobs: | ||
| govulncheck: | ||
| runs-on: ubuntu-latest | ||
|
|
||
| steps: | ||
| - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 | ||
|
|
||
| - id: go-version | ||
| run: | | ||
| make print-go-version >> "$GITHUB_OUTPUT" | ||
| - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2 | ||
| with: | ||
| go-version: ${{ steps.go-version.outputs.result }} | ||
|
|
||
| - run: make verify-govulncheck |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,99 @@ | ||
| # THIS FILE IS AUTOMATICALLY GENERATED. DO NOT EDIT. | ||
| # Edit https://github.com/cert-manager/makefile-modules/blob/main/modules/repository-base/base/.github/workflows/make-self-upgrade.yaml instead. | ||
|
|
||
| name: make-self-upgrade | ||
| concurrency: make-self-upgrade | ||
| on: | ||
| workflow_dispatch: {} | ||
| schedule: | ||
| - cron: '0 0 * * *' | ||
|
|
||
| permissions: | ||
| contents: read | ||
|
|
||
| jobs: | ||
| self_upgrade: | ||
| runs-on: ubuntu-latest | ||
|
|
||
| permissions: | ||
| contents: write | ||
| pull-requests: write | ||
|
|
||
| env: | ||
| SOURCE_BRANCH: "${{ github.ref_name }}" | ||
| SELF_UPGRADE_BRANCH: "self-upgrade-${{ github.ref_name }}" | ||
|
|
||
| steps: | ||
| - name: Fail if branch is not head of branch. | ||
| if: ${{ !startsWith(github.ref, 'refs/heads/') && env.SOURCE_BRANCH != '' && env.SELF_UPGRADE_BRANCH != '' }} | ||
| run: | | ||
| echo "This workflow should not be run on a non-branch-head." | ||
| exit 1 | ||
| - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 | ||
|
|
||
| - id: go-version | ||
| run: | | ||
| make print-go-version >> "$GITHUB_OUTPUT" | ||
| - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2 | ||
| with: | ||
| go-version: ${{ steps.go-version.outputs.result }} | ||
|
|
||
| - run: | | ||
| git checkout -B "$SELF_UPGRADE_BRANCH" | ||
| - run: | | ||
| make -j upgrade-klone | ||
| make -j generate | ||
| - id: is-up-to-date | ||
| shell: bash | ||
| run: | | ||
| git_status=$(git status -s) | ||
| is_up_to_date="true" | ||
| if [ -n "$git_status" ]; then | ||
| is_up_to_date="false" | ||
| echo "The following changes will be committed:" | ||
| echo "$git_status" | ||
| fi | ||
| echo "result=$is_up_to_date" >> "$GITHUB_OUTPUT" | ||
| - if: ${{ steps.is-up-to-date.outputs.result != 'true' }} | ||
| run: | | ||
| git config --global user.name "cert-manager-bot" | ||
| git config --global user.email "[email protected]" | ||
| git add -A && git commit -m "BOT: run 'make upgrade-klone' and 'make generate'" --signoff | ||
| git push -f origin "$SELF_UPGRADE_BRANCH" | ||
| - if: ${{ steps.is-up-to-date.outputs.result != 'true' }} | ||
| uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1 | ||
| with: | ||
| script: | | ||
| const { repo, owner } = context.repo; | ||
| const pulls = await github.rest.pulls.list({ | ||
| owner: owner, | ||
| repo: repo, | ||
| head: owner + ':' + process.env.SELF_UPGRADE_BRANCH, | ||
| base: process.env.SOURCE_BRANCH, | ||
| state: 'open', | ||
| }); | ||
| if (pulls.data.length < 1) { | ||
| const result = await github.rest.pulls.create({ | ||
| title: '[CI] Merge ' + process.env.SELF_UPGRADE_BRANCH + ' into ' + process.env.SOURCE_BRANCH, | ||
| owner: owner, | ||
| repo: repo, | ||
| head: process.env.SELF_UPGRADE_BRANCH, | ||
| base: process.env.SOURCE_BRANCH, | ||
| body: [ | ||
| 'This PR is auto-generated to bump the Makefile modules.', | ||
| ].join('\n'), | ||
| }); | ||
| await github.rest.issues.addLabels({ | ||
| owner, | ||
| repo, | ||
| issue_number: result.data.number, | ||
| labels: ['skip-review'] | ||
| }); | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,93 @@ | ||
| issues: | ||
| exclude-rules: | ||
| - linters: | ||
| - dogsled | ||
| - errcheck | ||
| - promlinter | ||
| - errname | ||
| - exhaustive | ||
| - nilerr | ||
| - interfacebloat | ||
| - nilnil | ||
| - nakedret | ||
| - musttag | ||
| - gomoddirectives | ||
| text: ".*" | ||
| - linters: | ||
| - gosec | ||
| text: "G(101|107|204|306|402)" | ||
| - linters: | ||
| - staticcheck | ||
| text: "SA(1002|1006|4000|4006)" | ||
| - linters: | ||
| - staticcheck | ||
| text: "(NewCertManagerBasicCertificateRequest)" | ||
| linters: | ||
| # Explicitly define all enabled linters | ||
| disable-all: true | ||
| enable: | ||
| - asasalint | ||
| - asciicheck | ||
| - bidichk | ||
| - bodyclose | ||
| - contextcheck | ||
| - decorder | ||
| - dogsled | ||
| - dupword | ||
| - durationcheck | ||
| - errcheck | ||
| - errchkjson | ||
| - errname | ||
| - execinquery | ||
| - exhaustive | ||
| - exportloopref | ||
| - forbidigo | ||
| - gci | ||
| - ginkgolinter | ||
| - gocheckcompilerdirectives | ||
| - gochecksumtype | ||
| - gocritic | ||
| - gofmt | ||
| - goheader | ||
| - goprintffuncname | ||
| - gosec | ||
| - gosimple | ||
| - gosmopolitan | ||
| - govet | ||
| - grouper | ||
| - importas | ||
| - ineffassign | ||
| - interfacebloat | ||
| - loggercheck | ||
| - makezero | ||
| - mirror | ||
| - misspell | ||
| - musttag | ||
| - nakedret | ||
| - nilerr | ||
| - nilnil | ||
| - noctx | ||
| - nosprintfhostport | ||
| - predeclared | ||
| - promlinter | ||
| - protogetter | ||
| - reassign | ||
| - sloglint | ||
| - staticcheck | ||
| - tagalign | ||
| - tenv | ||
| - testableexamples | ||
| - typecheck | ||
| - unconvert | ||
| - unparam | ||
| - unused | ||
| - usestdlibvars | ||
| - wastedassign | ||
| linters-settings: | ||
| gci: | ||
| sections: | ||
| - standard # Standard section: captures all standard packages. | ||
| - default # Default section: contains all imports that could not be matched to another section type. | ||
| - prefix(github.com/cert-manager/cert-manager) # Custom section: groups all imports with the specified Prefix. | ||
| - blank # Blank section: contains all blank imports. This section is not present unless explicitly enabled. | ||
| - dot # Dot section: contains all dot imports. This section is not present unless explicitly enabled. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,4 @@ | ||
| # CVE-2020-8559 is a vuln in old Kubernetes versions which seems to be incorrectly flagged by trivy. It seems like | ||
| # the version detection is wrongly looking at apiserver packages with versions < 1 - but all apiserver packages have | ||
| # a major version of 0. In any case this is a vuln in Kubernetes clusters, not in our code. | ||
| CVE-2020-8559 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,4 +1,3 @@ | ||
|
|
||
| Apache License | ||
| Version 2.0, January 2004 | ||
| http://www.apache.org/licenses/ | ||
|
|
||
Oops, something went wrong.