rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
3,182 Commits 1 Branch 0 Tags
dcc08c42e3183dfc331ea52ccaf4070d82d74339
Commit Graph

40 Commits

Author SHA1 Message Date
Bryan Frimin
138f24ef59 Add Homebrew tap publishing for prb CLI 
Configure GoReleaser to publish the prb CLI to the getprobo/homebrew-tap repository on each release. Separate the prb archive from the main probod archive and add the necessary GitHub token to the release workflow.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-03-20 14:33:35 +01:00
Bryan Frimin
3e3138f764 Cache Go modules explicitly with go mod download 
Add go mod download step after setup-go in all CI jobs to ensure the
module cache is populated as a discrete step. This makes cache hits visible
in logs and prevents module downloads from being interleaved with build
operations, improving cache effectiveness.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-03-16 15:54:54 +01:00
Bryan Frimin
38b12fa278 Upgrade go version 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-03-09 14:52:23 +01:00
Sacha Al Himdani
e173b26acd Update go and open telemetry 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-03-02 09:39:10 +01:00
Bryan Frimin
9b0226ad3c Upgrade codesign installer 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-02-16 17:53:22 +01:00
Bryan Frimin
76dc874ed6 Fix double install codesign 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-02-16 17:46:38 +01:00
Bryan Frimin
43b44b06bf Set fixed version of codesign + upgrade to docker v2 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-02-16 17:41:43 +01:00
Bryan Frimin
c9de03ec43 Fix cosign cache race condition 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-02-16 17:26:35 +01:00
Bryan Frimin
d2dbb6f714 Use bigger github hosted runner 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-02-13 16:20:31 +01:00
Bryan Frimin
015ebe43dc Use sbom file for grype 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-02-11 11:56:18 +01:00
Émile Ré
4c28792944 Upgrade go to 1.25.7 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-09 10:55:58 +04:00
mendral-app[bot]
09d73cf413 chore: pin all third-party actions to SHA digests 
Pin third-party GitHub Actions to immutable SHA digests to prevent
supply chain attacks via tag force-pushing or branch updates.

Actions pinned:
- trufflesecurity/trufflehog (was @main, now SHA)
- sigstore/cosign-installer@v3.8.1
- docker/setup-buildx-action@v3.12.0
- docker/setup-qemu-action@v3.7.0
- docker/login-action@v3.7.0
- goreleaser/goreleaser-action@v6.4.0
- aquasecurity/trivy-action@0.33.1
- github/codeql-action/upload-sarif@v4.32.1
- golangci/golangci-lint-action@v9.2.0
- docker/setup-compose-action@v1.2.0

Version comments added for maintainability.
 2026-02-05 08:28:22 +01:00
dependabot[bot]
b88a6ba012 Bump the github-actions group with 10 updates 
Bumps the github-actions group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `6` |
| [actions/setup-go](https://github.com/actions/setup-go) | `5` | `6` |
| [actions/setup-node](https://github.com/actions/setup-node) | `4` | `6` |
| [actions/cache](https://github.com/actions/cache) | `4` | `5` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.20.5` | `0.22.1` |
| [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.28.0` | `0.33.1` |
| [anchore/scan-action](https://github.com/anchore/scan-action) | `6.5.1` | `7.3.1` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `6` |
| [actions/attest-sbom](https://github.com/actions/attest-sbom) | `1` | `3` |
| [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `1` | `3` |


Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)

Updates `actions/setup-go` from 5 to 6
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v5...v6)

Updates `actions/setup-node` from 4 to 6
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v4...v6)

Updates `actions/cache` from 4 to 5
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v4...v5)

Updates `anchore/sbom-action` from 0.20.5 to 0.22.1
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](da167eac91...deef08a0db)

Updates `aquasecurity/trivy-action` from 0.28.0 to 0.33.1
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.28.0...0.33.1)

Updates `anchore/scan-action` from 6.5.1 to 7.3.1
- [Release notes](https://github.com/anchore/scan-action/releases)
- [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md)
- [Commits](1638637db6...8d2fce0942)

Updates `actions/upload-artifact` from 4 to 6
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v6)

Updates `actions/attest-sbom` from 1 to 3
- [Release notes](https://github.com/actions/attest-sbom/releases)
- [Changelog](https://github.com/actions/attest-sbom/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-sbom/compare/v1...v3)

Updates `actions/attest-build-provenance` from 1 to 3
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-build-provenance/compare/v1...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/cache
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: anchore/sbom-action
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: anchore/scan-action
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/attest-sbom
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/attest-build-provenance
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-01 21:14:12 +00:00
Émile Ré
58838e1420 Upgrade go to 1.25.6 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-29 11:59:12 +04:00
mendral-app[bot]
1b0fffe99e ci(release): enable Go module caching 
Add cache: true to actions/setup-go@v5 in the Release workflow to
cache Go modules between runs. This reduces the GoReleaser step
duration from 5-18 minutes to 1-3 minutes by avoiding repeated
module downloads.
 2026-01-26 08:49:41 -08:00
Émile Ré
4d80dccbbf Fix bot review 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 21:06:19 +04:00
Émile Ré
36cd0cae95 Update node to LTS and npm to avoid issue with optional dependencies on natives 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 17:47:44 +04:00
Émile Ré
81cb0de8f2 Update github workflows 
Signed-off-by: Émile Ré <nemile.re@gmail.com>
 2025-12-15 18:24:00 +01:00
Bryan Frimin
9bbea1d15e Upgrade golang version 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-03 11:48:52 +01:00
Bryan Frimin
55794631ee Fix output and sarif upload trivy 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-03 11:40:36 +01:00
Bryan Frimin
cd657e1bd8 Fix missing node modules release target 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-02 16:20:52 +01:00
Bryan Frimin
e01bec9f88 Fix npm version 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-02 15:33:23 +01:00
Bryan Frimin
d718766a94 Fix npm git url 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-02 15:26:51 +01:00
Bryan Frimin
3be517289e Fix npm scope 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-02 15:21:50 +01:00
Bryan Frimin
f02e6eca9b Fix update version command 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-02 15:17:08 +01:00
Bryan Frimin
6ba68ee830 Enable trusted publisher 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-02 14:35:38 +01:00
Bryan Frimin
04f3f3798a Fix npm config 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-02 14:28:15 +01:00
Bryan Frimin
0daf272320 Add release workflow 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-02 13:38:26 +01:00
Sacha Al Himdani
d828db46a3 Use official anchore github actions 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-09-10 20:21:12 +02:00
Sacha Al Himdani
02c1009c23 Update node 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-09-10 18:55:23 +02:00
Sacha Al Himdani
9a7294274b Run vulnerability scan on pull request 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-09-10 17:41:02 +02:00
Sacha Al Himdani
bfeddf37f4 Update go version to 1.25 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-08-13 10:35:50 +02:00
Bryan Frimin
b99c2b0ef2 Block release when critial vulnerabilities founded in deps 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-14 17:20:03 +02:00
Bryan Frimin
725dec83d1 Fix github output 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-11 14:58:26 +02:00
Bryan Frimin
17bdcf9c78 Fix SBOM for docker image 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-11 13:43:27 +02:00
Bryan Frimin
6f423f85cf Fix github storage consistency 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-11 12:53:08 +02:00
Bryan Frimin
ea7174a9a1 Fix buildx inspect 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-11 12:40:25 +02:00
Bryan Frimin
bc06f2f2e6 Fix sbom for docker image 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-11 12:14:52 +02:00
Bryan Frimin
555ae4fb37 Fix missing buildx and qemu 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-11 11:14:14 +02:00
Bryan Frimin
1a558f5671 Add new release workflow 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-11 10:55:34 +02:00