rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,524 Commits 1 Branch 0 Tags
74d7d3ff25737ea2e7a15be4cf4d9590cc66d47d
Commit Graph

46 Commits

Author SHA1 Message Date
Émile Ré
74d7d3ff25 Upgrade Relay to v20.1.1 and unify compiler config 
Consolidate the two per-app relay configs (console and trust)
into a single multi-project relay.config.json at the repo root
with three projects: core, iam, and trust. Bump all relay
packages from v19 to v20.1.1 and move relay-compiler to the
root devDependencies. Replace per-workspace relay scripts with
a single root-level npm run relay command and update the
GNUmakefile, CI workflows, and docs accordingly.

Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-14 16:04:11 +04:00
Bryan Frimin
660567f894 Fix permission error for CD 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-04-06 12:26:38 +02:00
Bryan Frimin
893d4f674e Fix CD pipeline 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-04-06 12:08:41 +02:00
Bryan Frimin
7e685a2e96 Rewrite CI/CD pipeline 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-04-03 20:14:38 +02:00
dependabot[bot]
e6b88e7eec Bump the github-actions group with 12 updates 
Bumps the github-actions group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3.7.0` | `4.0.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.12.0` | `4.0.0` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.22.1` | `0.24.0` |
| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `6.4.0` | `7.0.0` |
| [anchore/scan-action](https://github.com/anchore/scan-action) | `7.3.1` | `7.4.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `6` | `7` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `6` | `8` |
| [docker/setup-compose-action](https://github.com/docker/setup-compose-action) | `1.2.0` | `2.1.0` |
| [docker/login-action](https://github.com/docker/login-action) | `3.7.0` | `4.0.0` |
| [actions/attest-sbom](https://github.com/actions/attest-sbom) | `3` | `4` |
| [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `3` | `4` |
| [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `b78fbfd8eb982f4802e09a265fb2bc37b3040975` | `e48f9039c82786db50685e8ef7d980b209f06186` |


Updates `docker/setup-qemu-action` from 3.7.0 to 4.0.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](c7c5346462...ce360397dd)

Updates `docker/setup-buildx-action` from 3.12.0 to 4.0.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](8d2750c68a...4d04d5d948)

Updates `anchore/sbom-action` from 0.22.1 to 0.24.0
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](deef08a0db...e22c389904)

Updates `goreleaser/goreleaser-action` from 6.4.0 to 7.0.0
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](e435ccd777...ec59f474b9)

Updates `anchore/scan-action` from 7.3.1 to 7.4.0
- [Release notes](https://github.com/anchore/scan-action/releases)
- [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md)
- [Commits](8d2fce0942...e1165082ff)

Updates `actions/upload-artifact` from 6 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)

Updates `actions/download-artifact` from 6 to 8
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v6...v8)

Updates `docker/setup-compose-action` from 1.2.0 to 2.1.0
- [Release notes](https://github.com/docker/setup-compose-action/releases)
- [Commits](364cc21a5d...8cccb8c14b)

Updates `docker/login-action` from 3.7.0 to 4.0.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](c94ce9fb46...b45d80f862)

Updates `actions/attest-sbom` from 3 to 4
- [Release notes](https://github.com/actions/attest-sbom/releases)
- [Changelog](https://github.com/actions/attest-sbom/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-sbom/compare/v3...v4)

Updates `actions/attest-build-provenance` from 3 to 4
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-build-provenance/compare/v3...v4)

Updates `trufflesecurity/trufflehog` from b78fbfd8eb982f4802e09a265fb2bc37b3040975 to e48f9039c82786db50685e8ef7d980b209f06186
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](b78fbfd8eb...e48f9039c8)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: anchore/sbom-action
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: goreleaser/goreleaser-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: anchore/scan-action
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/setup-compose-action
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/login-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/attest-sbom
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/attest-build-provenance
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: trufflesecurity/trufflehog
  dependency-version: e48f9039c82786db50685e8ef7d980b209f06186
  dependency-type: direct:production
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-02 18:37:23 +02:00
Sacha Al Himdani
c18f0b0748 Bump aquasecurity/trivy-action from 0.33.1 to 0.35.0 
Fixes GHSA-69fq-xp46-6x23 (Critical) and GHSA-9p44-j4g5-cfx5 (Medium).

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-03-25 08:54:09 +01:00
Bryan Frimin
138f24ef59 Add Homebrew tap publishing for prb CLI 
Configure GoReleaser to publish the prb CLI to the getprobo/homebrew-tap repository on each release. Separate the prb archive from the main probod archive and add the necessary GitHub token to the release workflow.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-03-20 14:33:35 +01:00
Bryan Frimin
3e3138f764 Cache Go modules explicitly with go mod download 
Add go mod download step after setup-go in all CI jobs to ensure the
module cache is populated as a discrete step. This makes cache hits visible
in logs and prevents module downloads from being interleaved with build
operations, improving cache effectiveness.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-03-16 15:54:54 +01:00
Bryan Frimin
38b12fa278 Upgrade go version 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-03-09 14:52:23 +01:00
Sacha Al Himdani
e173b26acd Update go and open telemetry 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-03-02 09:39:10 +01:00
Bryan Frimin
9b0226ad3c Upgrade codesign installer 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-02-16 17:53:22 +01:00
Bryan Frimin
76dc874ed6 Fix double install codesign 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-02-16 17:46:38 +01:00
Bryan Frimin
43b44b06bf Set fixed version of codesign + upgrade to docker v2 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-02-16 17:41:43 +01:00
Bryan Frimin
c9de03ec43 Fix cosign cache race condition 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-02-16 17:26:35 +01:00
Bryan Frimin
d2dbb6f714 Use bigger github hosted runner 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-02-13 16:20:31 +01:00
Bryan Frimin
015ebe43dc Use sbom file for grype 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-02-11 11:56:18 +01:00
Émile Ré
4c28792944 Upgrade go to 1.25.7 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-09 10:55:58 +04:00
mendral-app[bot]
09d73cf413 chore: pin all third-party actions to SHA digests 
Pin third-party GitHub Actions to immutable SHA digests to prevent
supply chain attacks via tag force-pushing or branch updates.

Actions pinned:
- trufflesecurity/trufflehog (was @main, now SHA)
- sigstore/cosign-installer@v3.8.1
- docker/setup-buildx-action@v3.12.0
- docker/setup-qemu-action@v3.7.0
- docker/login-action@v3.7.0
- goreleaser/goreleaser-action@v6.4.0
- aquasecurity/trivy-action@0.33.1
- github/codeql-action/upload-sarif@v4.32.1
- golangci/golangci-lint-action@v9.2.0
- docker/setup-compose-action@v1.2.0

Version comments added for maintainability.
 2026-02-05 08:28:22 +01:00
dependabot[bot]
b88a6ba012 Bump the github-actions group with 10 updates 
Bumps the github-actions group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `6` |
| [actions/setup-go](https://github.com/actions/setup-go) | `5` | `6` |
| [actions/setup-node](https://github.com/actions/setup-node) | `4` | `6` |
| [actions/cache](https://github.com/actions/cache) | `4` | `5` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.20.5` | `0.22.1` |
| [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.28.0` | `0.33.1` |
| [anchore/scan-action](https://github.com/anchore/scan-action) | `6.5.1` | `7.3.1` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `6` |
| [actions/attest-sbom](https://github.com/actions/attest-sbom) | `1` | `3` |
| [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `1` | `3` |


Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)

Updates `actions/setup-go` from 5 to 6
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v5...v6)

Updates `actions/setup-node` from 4 to 6
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v4...v6)

Updates `actions/cache` from 4 to 5
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v4...v5)

Updates `anchore/sbom-action` from 0.20.5 to 0.22.1
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](da167eac91...deef08a0db)

Updates `aquasecurity/trivy-action` from 0.28.0 to 0.33.1
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.28.0...0.33.1)

Updates `anchore/scan-action` from 6.5.1 to 7.3.1
- [Release notes](https://github.com/anchore/scan-action/releases)
- [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md)
- [Commits](1638637db6...8d2fce0942)

Updates `actions/upload-artifact` from 4 to 6
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v6)

Updates `actions/attest-sbom` from 1 to 3
- [Release notes](https://github.com/actions/attest-sbom/releases)
- [Changelog](https://github.com/actions/attest-sbom/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-sbom/compare/v1...v3)

Updates `actions/attest-build-provenance` from 1 to 3
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-build-provenance/compare/v1...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/cache
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: anchore/sbom-action
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: anchore/scan-action
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/attest-sbom
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/attest-build-provenance
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-01 21:14:12 +00:00
Émile Ré
58838e1420 Upgrade go to 1.25.6 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-29 11:59:12 +04:00
mendral-app[bot]
1b0fffe99e ci(release): enable Go module caching 
Add cache: true to actions/setup-go@v5 in the Release workflow to
cache Go modules between runs. This reduces the GoReleaser step
duration from 5-18 minutes to 1-3 minutes by avoiding repeated
module downloads.
 2026-01-26 08:49:41 -08:00
Émile Ré
4d80dccbbf Fix bot review 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 21:06:19 +04:00
Émile Ré
36cd0cae95 Update node to LTS and npm to avoid issue with optional dependencies on natives 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 17:47:44 +04:00
Émile Ré
81cb0de8f2 Update github workflows 
Signed-off-by: Émile Ré <nemile.re@gmail.com>
 2025-12-15 18:24:00 +01:00
Bryan Frimin
9bbea1d15e Upgrade golang version 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-03 11:48:52 +01:00
Bryan Frimin
55794631ee Fix output and sarif upload trivy 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-03 11:40:36 +01:00
Bryan Frimin
cd657e1bd8 Fix missing node modules release target 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-02 16:20:52 +01:00
Bryan Frimin
e01bec9f88 Fix npm version 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-02 15:33:23 +01:00
Bryan Frimin
d718766a94 Fix npm git url 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-02 15:26:51 +01:00
Bryan Frimin
3be517289e Fix npm scope 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-02 15:21:50 +01:00
Bryan Frimin
f02e6eca9b Fix update version command 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-02 15:17:08 +01:00
Bryan Frimin
6ba68ee830 Enable trusted publisher 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-02 14:35:38 +01:00
Bryan Frimin
04f3f3798a Fix npm config 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-02 14:28:15 +01:00
Bryan Frimin
0daf272320 Add release workflow 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-02 13:38:26 +01:00
Sacha Al Himdani
d828db46a3 Use official anchore github actions 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-09-10 20:21:12 +02:00
Sacha Al Himdani
02c1009c23 Update node 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-09-10 18:55:23 +02:00
Sacha Al Himdani
9a7294274b Run vulnerability scan on pull request 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-09-10 17:41:02 +02:00
Sacha Al Himdani
bfeddf37f4 Update go version to 1.25 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-08-13 10:35:50 +02:00
Bryan Frimin
b99c2b0ef2 Block release when critial vulnerabilities founded in deps 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-14 17:20:03 +02:00
Bryan Frimin
725dec83d1 Fix github output 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-11 14:58:26 +02:00
Bryan Frimin
17bdcf9c78 Fix SBOM for docker image 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-11 13:43:27 +02:00
Bryan Frimin
6f423f85cf Fix github storage consistency 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-11 12:53:08 +02:00
Bryan Frimin
ea7174a9a1 Fix buildx inspect 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-11 12:40:25 +02:00
Bryan Frimin
bc06f2f2e6 Fix sbom for docker image 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-11 12:14:52 +02:00
Bryan Frimin
555ae4fb37 Fix missing buildx and qemu 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-11 11:14:14 +02:00
Bryan Frimin
1a558f5671 Add new release workflow 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-11 10:55:34 +02:00