mendral-app[bot]
db27c6763f
fix: add grype binary caching and retry logic to release-snapshot job
...
- Cache grype binary using actions/cache to avoid repeated downloads
- Add retry logic (3 attempts with exponential backoff) for grype installation
- Pre-install grype before scan-action to ensure it's available
This addresses the HTTP 503/504 timeout errors when downloading grype from
GitHub releases, which caused 6 failures on the main branch in the past 14 days
(90.32% success rate vs 99% target).
2026-01-26 17:11:04 -08:00
Bryan Frimin
9b84206d56
Add Dependabot configuration for all dependencies
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2026-01-26 17:03:04 -08:00
mendral-app[bot]
1b0fffe99e
ci(release): enable Go module caching
...
Add cache: true to actions/setup-go@v5 in the Release workflow to
cache Go modules between runs. This reduces the GoReleaser step
duration from 5-18 minutes to 1-3 minutes by avoiding repeated
module downloads.
2026-01-26 08:49:41 -08:00
Émile Ré
d1f6006a17
Rename e2e test results artifact
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-01-26 12:08:55 +04:00
Émile Ré
f32b7d60f7
Always upload test results + fix cgo enabling for tests
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-01-26 12:02:46 +04:00
Émile Ré
0c73e28a31
Add junit results to e2e tests too
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-01-26 11:53:59 +04:00
Émile Ré
e1989e002f
Add gotestsum as a tool and use junit format to get test analysis
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-01-26 11:34:05 +04:00
Émile Ré
188ae13d58
Move linting in dedicated CI job
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-01-23 13:17:46 +04:00
Émile Ré
4d80dccbbf
Fix bot review
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-01-22 21:06:19 +04:00
Émile Ré
36cd0cae95
Update node to LTS and npm to avoid issue with optional dependencies on natives
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-01-22 17:47:44 +04:00
mendral-app[bot]
f55d4984ec
Enable Go module and npm caching in make workflow to reduce CI execution time
2026-01-05 13:58:41 +01:00
mendral-app[bot]
4a377e4aff
Suppress mkcert Firefox/Chrome warning in E2E tests
2026-01-05 11:21:52 +01:00
mendral-app[bot]
b438732bf7
Cache Trivy database to prevent HTTP 504 download failures
2026-01-02 01:15:43 -08:00
Bryan Frimin
ee08aeb8bf
Disable trivy license scanning
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-12-24 08:55:27 +01:00
Bryan Frimin
3830300c8e
Update trivy version
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-12-24 08:49:47 +01:00
Bryan Frimin
def286a827
Fix trivy version
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-12-24 08:46:21 +01:00
Bryan Frimin
564540e2ab
Fix path for trivy
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-12-24 08:44:12 +01:00
Bryan Frimin
179f44db3e
Fix ignore file
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-12-24 08:35:26 +01:00
Bryan Frimin
fd87a70cf2
Add license checker
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-12-23 22:35:46 +01:00
Émile Ré
81cb0de8f2
Update github workflows
...
Signed-off-by: Émile Ré <nemile.re@gmail.com >
2025-12-15 18:24:00 +01:00
Bryan Frimin
9bbea1d15e
Upgrade golang version
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-12-03 11:48:52 +01:00
Bryan Frimin
55794631ee
Fix output and sarif upload trivy
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-12-03 11:40:36 +01:00
Bryan Frimin
cd657e1bd8
Fix missing node modules release target
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-12-02 16:20:52 +01:00
Bryan Frimin
e01bec9f88
Fix npm version
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-12-02 15:33:23 +01:00
Bryan Frimin
d718766a94
Fix npm git url
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-12-02 15:26:51 +01:00
Bryan Frimin
3be517289e
Fix npm scope
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-12-02 15:21:50 +01:00
Bryan Frimin
f02e6eca9b
Fix update version command
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-12-02 15:17:08 +01:00
Bryan Frimin
6ba68ee830
Enable trusted publisher
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-12-02 14:35:38 +01:00
Bryan Frimin
04f3f3798a
Fix npm config
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-12-02 14:28:15 +01:00
Bryan Frimin
0daf272320
Add release workflow
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-12-02 13:38:26 +01:00
Bryan Frimin
04a142038e
Update grype output
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-12-02 10:58:03 +01:00
Bryan Frimin
132308eaf0
Disable debug logs
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-12-01 11:59:47 +01:00
Bryan Frimin
1645877bee
Fix github action container start
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-12-01 11:53:52 +01:00
Bryan Frimin
5f379a78ea
Add e2e in github action
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-30 17:30:31 +01:00
Bryan Frimin
62a5074e88
Upgrade CodeQL config
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-25 11:18:57 +01:00
Bryan Frimin
4671dc7ac6
Upload trivy scan results to GitHub security tab
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-10-16 14:11:14 +02:00
Sacha Al Himdani
ce613ca453
Change trufflehog workflow permission
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-09-16 10:17:59 +02:00
Bryan FRIMIN
28c41fa4ae
Fix codeql scan
...
Signed-off-by: Bryan FRIMIN <bryan@getprobo.com >
2025-09-14 15:00:25 +02:00
Bryan Frimin
cc354cd9c5
Add secret scanning
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-09-14 14:18:48 +02:00
Sacha Al Himdani
d828db46a3
Use official anchore github actions
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-09-10 20:21:12 +02:00
Sacha Al Himdani
02c1009c23
Update node
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-09-10 18:55:23 +02:00
Sacha Al Himdani
9a7294274b
Run vulnerability scan on pull request
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-09-10 17:41:02 +02:00
Bryan Frimin
e78a7beaa3
Fix hard coded trivy scan version
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-08-13 17:05:31 +04:00
Bryan Frimin
3133a1e282
Update trivy to run on local image
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-08-13 16:41:22 +04:00
Bryan Frimin
67338d4736
Use fixed version instead of stable
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-08-13 15:26:02 +04:00
Sacha Al Himdani
bfeddf37f4
Update go version to 1.25
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-08-13 10:35:50 +02:00
Bryan Frimin
8a77271308
Fix github action workflows
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-07-15 14:05:14 +02:00
Bryan Frimin
0081d8195b
Remove unused comment
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-07-15 09:59:52 +02:00
Bryan Frimin
b99c2b0ef2
Block release when critial vulnerabilities founded in deps
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-07-14 17:20:03 +02:00
Bryan Frimin
df394e014f
Fix go version
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-07-14 17:18:48 +02:00