rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,890 Commits 1 Branch 0 Tags
e1fb61979b96f087e91c02b4ddaa69eecbdbce03
Commit Graph

73 Commits

Author SHA1 Message Date
Sacha Al Himdani
e173b26acd Update go and open telemetry 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-03-02 09:39:10 +01:00
Bryan Frimin
d2dbb6f714 Use bigger github hosted runner 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-02-13 16:20:31 +01:00
Bryan Frimin
015ebe43dc Use sbom file for grype 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-02-11 11:56:18 +01:00
Émile Ré
4c28792944 Upgrade go to 1.25.7 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-09 10:55:58 +04:00
mendral-app[bot]
09d73cf413 chore: pin all third-party actions to SHA digests 
Pin third-party GitHub Actions to immutable SHA digests to prevent
supply chain attacks via tag force-pushing or branch updates.

Actions pinned:
- trufflesecurity/trufflehog (was @main, now SHA)
- sigstore/cosign-installer@v3.8.1
- docker/setup-buildx-action@v3.12.0
- docker/setup-qemu-action@v3.7.0
- docker/login-action@v3.7.0
- goreleaser/goreleaser-action@v6.4.0
- aquasecurity/trivy-action@0.33.1
- github/codeql-action/upload-sarif@v4.32.1
- golangci/golangci-lint-action@v9.2.0
- docker/setup-compose-action@v1.2.0

Version comments added for maintainability.
 2026-02-05 08:28:22 +01:00
Émile Ré
459ee41bd0 Skip apps building on api e2e tests 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-04 18:32:53 +04:00
Bryan Frimin
31f2cde8d0 Fix missing golintci binary 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-02-02 19:06:36 +01:00
Bryan Frimin
f7f2d704f2 Update github action lint command 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-02-02 18:45:37 +01:00
dependabot[bot]
b88a6ba012 Bump the github-actions group with 10 updates 
Bumps the github-actions group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `6` |
| [actions/setup-go](https://github.com/actions/setup-go) | `5` | `6` |
| [actions/setup-node](https://github.com/actions/setup-node) | `4` | `6` |
| [actions/cache](https://github.com/actions/cache) | `4` | `5` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.20.5` | `0.22.1` |
| [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.28.0` | `0.33.1` |
| [anchore/scan-action](https://github.com/anchore/scan-action) | `6.5.1` | `7.3.1` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `6` |
| [actions/attest-sbom](https://github.com/actions/attest-sbom) | `1` | `3` |
| [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `1` | `3` |


Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)

Updates `actions/setup-go` from 5 to 6
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v5...v6)

Updates `actions/setup-node` from 4 to 6
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v4...v6)

Updates `actions/cache` from 4 to 5
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v4...v5)

Updates `anchore/sbom-action` from 0.20.5 to 0.22.1
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](da167eac91...deef08a0db)

Updates `aquasecurity/trivy-action` from 0.28.0 to 0.33.1
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.28.0...0.33.1)

Updates `anchore/scan-action` from 6.5.1 to 7.3.1
- [Release notes](https://github.com/anchore/scan-action/releases)
- [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md)
- [Commits](1638637db6...8d2fce0942)

Updates `actions/upload-artifact` from 4 to 6
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v6)

Updates `actions/attest-sbom` from 1 to 3
- [Release notes](https://github.com/actions/attest-sbom/releases)
- [Changelog](https://github.com/actions/attest-sbom/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-sbom/compare/v1...v3)

Updates `actions/attest-build-provenance` from 1 to 3
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-build-provenance/compare/v1...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/cache
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: anchore/sbom-action
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: anchore/scan-action
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/attest-sbom
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/attest-build-provenance
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-01 21:14:12 +00:00
Émile Ré
58838e1420 Upgrade go to 1.25.6 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-29 11:59:12 +04:00
mendral-app[bot]
db27c6763f fix: add grype binary caching and retry logic to release-snapshot job 
- Cache grype binary using actions/cache to avoid repeated downloads
- Add retry logic (3 attempts with exponential backoff) for grype installation
- Pre-install grype before scan-action to ensure it's available

This addresses the HTTP 503/504 timeout errors when downloading grype from
GitHub releases, which caused 6 failures on the main branch in the past 14 days
(90.32% success rate vs 99% target).
 2026-01-26 17:11:04 -08:00
Émile Ré
d1f6006a17 Rename e2e test results artifact 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-26 12:08:55 +04:00
Émile Ré
f32b7d60f7 Always upload test results + fix cgo enabling for tests 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-26 12:02:46 +04:00
Émile Ré
0c73e28a31 Add junit results to e2e tests too 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-26 11:53:59 +04:00
Émile Ré
e1989e002f Add gotestsum as a tool and use junit format to get test analysis 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-26 11:34:05 +04:00
Émile Ré
188ae13d58 Move linting in dedicated CI job 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-23 13:17:46 +04:00
Émile Ré
36cd0cae95 Update node to LTS and npm to avoid issue with optional dependencies on natives 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 17:47:44 +04:00
mendral-app[bot]
f55d4984ec Enable Go module and npm caching in make workflow to reduce CI execution time 2026-01-05 13:58:41 +01:00
mendral-app[bot]
4a377e4aff Suppress mkcert Firefox/Chrome warning in E2E tests 2026-01-05 11:21:52 +01:00
mendral-app[bot]
b438732bf7 Cache Trivy database to prevent HTTP 504 download failures 2026-01-02 01:15:43 -08:00
Bryan Frimin
ee08aeb8bf Disable trivy license scanning 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-24 08:55:27 +01:00
Bryan Frimin
3830300c8e Update trivy version 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-24 08:49:47 +01:00
Bryan Frimin
def286a827 Fix trivy version 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-24 08:46:21 +01:00
Bryan Frimin
564540e2ab Fix path for trivy 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-24 08:44:12 +01:00
Bryan Frimin
179f44db3e Fix ignore file 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-24 08:35:26 +01:00
Bryan Frimin
fd87a70cf2 Add license checker 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-23 22:35:46 +01:00
Émile Ré
81cb0de8f2 Update github workflows 
Signed-off-by: Émile Ré <nemile.re@gmail.com>
 2025-12-15 18:24:00 +01:00
Bryan Frimin
9bbea1d15e Upgrade golang version 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-03 11:48:52 +01:00
Bryan Frimin
55794631ee Fix output and sarif upload trivy 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-03 11:40:36 +01:00
Bryan Frimin
04a142038e Update grype output 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-02 10:58:03 +01:00
Bryan Frimin
132308eaf0 Disable debug logs 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-01 11:59:47 +01:00
Bryan Frimin
1645877bee Fix github action container start 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-12-01 11:53:52 +01:00
Bryan Frimin
5f379a78ea Add e2e in github action 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-30 17:30:31 +01:00
Bryan Frimin
62a5074e88 Upgrade CodeQL config 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-25 11:18:57 +01:00
Bryan Frimin
4671dc7ac6 Upload trivy scan results to GitHub security tab 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-16 14:11:14 +02:00
Sacha Al Himdani
d828db46a3 Use official anchore github actions 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-09-10 20:21:12 +02:00
Sacha Al Himdani
02c1009c23 Update node 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-09-10 18:55:23 +02:00
Sacha Al Himdani
9a7294274b Run vulnerability scan on pull request 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-09-10 17:41:02 +02:00
Bryan Frimin
e78a7beaa3 Fix hard coded trivy scan version 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-08-13 17:05:31 +04:00
Bryan Frimin
3133a1e282 Update trivy to run on local image 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-08-13 16:41:22 +04:00
Bryan Frimin
67338d4736 Use fixed version instead of stable 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-08-13 15:26:02 +04:00
Bryan Frimin
8a77271308 Fix github action workflows 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-15 14:05:14 +02:00
Bryan Frimin
0081d8195b Remove unused comment 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-15 09:59:52 +02:00
Bryan Frimin
df394e014f Fix go version 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-14 17:18:48 +02:00
Bryan Frimin
6035d29eec Add lint workflow 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-14 17:15:48 +02:00
Bryan Frimin
bd1492f4c0 Add test workflow 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-14 17:15:14 +02:00
Bryan Frimin
e21385c444 Fix try to release on every commit 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-14 11:38:32 +02:00
Bryan Frimin
fee2031a62 Fix main workflow 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-07-14 11:34:48 +02:00
Bryan Frimin
d5ea5aaea6 Upgrade to ubuntu LTS 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-05-16 20:45:43 -07:00
Bryan Frimin
4401416bf0 Disable trivy vex notice 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-05-16 18:36:53 -07:00