Commit Graph

86 Commits

Author SHA1 Message Date
mendral-app[bot]
db27c6763f fix: add grype binary caching and retry logic to release-snapshot job
- Cache grype binary using actions/cache to avoid repeated downloads
- Add retry logic (3 attempts with exponential backoff) for grype installation
- Pre-install grype before scan-action to ensure it's available

This addresses the HTTP 503/504 timeout errors when downloading grype from
GitHub releases, which caused 6 failures on the main branch in the past 14 days
(90.32% success rate vs 99% target).
2026-01-26 17:11:04 -08:00
Bryan Frimin
9b84206d56 Add Dependabot configuration for all dependencies
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-26 17:03:04 -08:00
mendral-app[bot]
1b0fffe99e ci(release): enable Go module caching
Add cache: true to actions/setup-go@v5 in the Release workflow to
cache Go modules between runs. This reduces the GoReleaser step
duration from 5-18 minutes to 1-3 minutes by avoiding repeated
module downloads.
2026-01-26 08:49:41 -08:00
Émile Ré
d1f6006a17 Rename e2e test results artifact
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-26 12:08:55 +04:00
Émile Ré
f32b7d60f7 Always upload test results + fix cgo enabling for tests
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-26 12:02:46 +04:00
Émile Ré
0c73e28a31 Add junit results to e2e tests too
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-26 11:53:59 +04:00
Émile Ré
e1989e002f Add gotestsum as a tool and use junit format to get test analysis
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-26 11:34:05 +04:00
Émile Ré
188ae13d58 Move linting in dedicated CI job
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-23 13:17:46 +04:00
Émile Ré
4d80dccbbf Fix bot review
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-22 21:06:19 +04:00
Émile Ré
36cd0cae95 Update node to LTS and npm to avoid issue with optional dependencies on natives
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-22 17:47:44 +04:00
mendral-app[bot]
f55d4984ec Enable Go module and npm caching in make workflow to reduce CI execution time 2026-01-05 13:58:41 +01:00
mendral-app[bot]
4a377e4aff Suppress mkcert Firefox/Chrome warning in E2E tests 2026-01-05 11:21:52 +01:00
mendral-app[bot]
b438732bf7 Cache Trivy database to prevent HTTP 504 download failures 2026-01-02 01:15:43 -08:00
Bryan Frimin
ee08aeb8bf Disable trivy license scanning
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-12-24 08:55:27 +01:00
Bryan Frimin
3830300c8e Update trivy version
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-12-24 08:49:47 +01:00
Bryan Frimin
def286a827 Fix trivy version
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-12-24 08:46:21 +01:00
Bryan Frimin
564540e2ab Fix path for trivy
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-12-24 08:44:12 +01:00
Bryan Frimin
179f44db3e Fix ignore file
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-12-24 08:35:26 +01:00
Bryan Frimin
fd87a70cf2 Add license checker
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-12-23 22:35:46 +01:00
Émile Ré
81cb0de8f2 Update github workflows
Signed-off-by: Émile Ré <nemile.re@gmail.com>
2025-12-15 18:24:00 +01:00
Bryan Frimin
9bbea1d15e Upgrade golang version
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-12-03 11:48:52 +01:00
Bryan Frimin
55794631ee Fix output and sarif upload trivy
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-12-03 11:40:36 +01:00
Bryan Frimin
cd657e1bd8 Fix missing node modules release target
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-12-02 16:20:52 +01:00
Bryan Frimin
e01bec9f88 Fix npm version
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-12-02 15:33:23 +01:00
Bryan Frimin
d718766a94 Fix npm git url
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-12-02 15:26:51 +01:00
Bryan Frimin
3be517289e Fix npm scope
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-12-02 15:21:50 +01:00
Bryan Frimin
f02e6eca9b Fix update version command
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-12-02 15:17:08 +01:00
Bryan Frimin
6ba68ee830 Enable trusted publisher
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-12-02 14:35:38 +01:00
Bryan Frimin
04f3f3798a Fix npm config
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-12-02 14:28:15 +01:00
Bryan Frimin
0daf272320 Add release workflow
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-12-02 13:38:26 +01:00
Bryan Frimin
04a142038e Update grype output
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-12-02 10:58:03 +01:00
Bryan Frimin
132308eaf0 Disable debug logs
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-12-01 11:59:47 +01:00
Bryan Frimin
1645877bee Fix github action container start
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-12-01 11:53:52 +01:00
Bryan Frimin
5f379a78ea Add e2e in github action
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-30 17:30:31 +01:00
Bryan Frimin
62a5074e88 Upgrade CodeQL config
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-25 11:18:57 +01:00
Bryan Frimin
4671dc7ac6 Upload trivy scan results to GitHub security tab
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-16 14:11:14 +02:00
Sacha Al Himdani
ce613ca453 Change trufflehog workflow permission
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-09-16 10:17:59 +02:00
Bryan FRIMIN
28c41fa4ae Fix codeql scan
Signed-off-by: Bryan FRIMIN <bryan@getprobo.com>
2025-09-14 15:00:25 +02:00
Bryan Frimin
cc354cd9c5 Add secret scanning
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-09-14 14:18:48 +02:00
Sacha Al Himdani
d828db46a3 Use official anchore github actions
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-09-10 20:21:12 +02:00
Sacha Al Himdani
02c1009c23 Update node
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-09-10 18:55:23 +02:00
Sacha Al Himdani
9a7294274b Run vulnerability scan on pull request
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-09-10 17:41:02 +02:00
Bryan Frimin
e78a7beaa3 Fix hard coded trivy scan version
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-08-13 17:05:31 +04:00
Bryan Frimin
3133a1e282 Update trivy to run on local image
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-08-13 16:41:22 +04:00
Bryan Frimin
67338d4736 Use fixed version instead of stable
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-08-13 15:26:02 +04:00
Sacha Al Himdani
bfeddf37f4 Update go version to 1.25
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-08-13 10:35:50 +02:00
Bryan Frimin
8a77271308 Fix github action workflows
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-07-15 14:05:14 +02:00
Bryan Frimin
0081d8195b Remove unused comment
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-07-15 09:59:52 +02:00
Bryan Frimin
b99c2b0ef2 Block release when critial vulnerabilities founded in deps
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-07-14 17:20:03 +02:00
Bryan Frimin
df394e014f Fix go version
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-07-14 17:18:48 +02:00