Chris Lu
89688d9147
Merge pull request #3027 from chrislusf/dependabot/github_actions/docker/login-action-2
2022-05-09 08:33:16 -07:00
Chris Lu
ddc61a0af9
Merge pull request #3026 from chrislusf/dependabot/github_actions/docker/metadata-action-4.0.1
2022-05-09 08:33:05 -07:00
Chris Lu
108b7faef4
Merge pull request #3025 from chrislusf/dependabot/github_actions/docker/setup-qemu-action-2
2022-05-09 08:32:52 -07:00
dependabot[bot]
3a21196fc3
Bump docker/login-action from 1.14.1 to 2
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 1.14.1 to 2.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](dd4fa0671b...49ed152c8e
2022-05-09 15:22:39 +00:00
dependabot[bot]
607ba90f62
Bump docker/metadata-action from 3.8.0 to 4.0.1
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 3.8.0 to 4.0.1.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Upgrade guide](https://github.com/docker/metadata-action/blob/master/UPGRADE.md )
- [Commits](b2391d37b4...69f6fc9d46
2022-05-09 15:22:35 +00:00
dependabot[bot]
4093459630
Bump docker/setup-qemu-action from 1.2.0 to 2
...
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ) from 1.2.0 to 2.
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](27d0a4f181...8b122486ce
2022-05-09 15:22:29 +00:00
dependabot[bot]
a50828d8f8
Bump docker/setup-buildx-action from 1.7.0 to 2
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 1.7.0 to 2.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](f211e3e9de...dc7b9719a9
2022-05-09 15:22:26 +00:00
Konstantin Lebedev
f58adaab25
build tag ydb since the growth of the binary is 5 mb
2022-05-03 23:20:09 +05:00
chrislu
e82233efa7
add back arm64 darwin
2022-05-02 13:35:06 -07:00
Chris Lu
80752afff3
Merge pull request #3002 from chrislusf/dependabot/github_actions/docker/setup-buildx-action-1.7.0
...
Bump docker/setup-buildx-action from 1.6.0 to 1.7.0
2022-05-02 10:49:28 -07:00
dependabot[bot]
94f302fb34
Bump docker/setup-buildx-action from 1.6.0 to 1.7.0
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 1.6.0 to 1.7.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](94ab11c41e...f211e3e9de
2022-05-02 15:24:27 +00:00
dependabot[bot]
c772bbb704
Bump docker/metadata-action from 3.7.0 to 3.8.0
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 3.7.0 to 3.8.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](f2a13332ac...b2391d37b4
2022-05-02 15:24:21 +00:00
Chris Lu
15c7d6e7bc
temporarily skip arm64 for mac
2022-04-26 22:05:31 -07:00
Chris Lu
42cc8d8aa3
Update binaries_release2.yml
2022-04-24 23:51:29 -07:00
Chris Lu
14a917c262
Update dependabot.yml
2022-04-24 21:44:53 -07:00
chrislu
2988e69b1e
update go build
2022-04-21 01:43:15 -07:00
naveensrinivasan
3d5fc72d55
chore(deps): Included dependency review
...
> Dependency Review GitHub Action in your repository to enforce dependency reviews on your pull requests.
> The action scans for vulnerable versions of dependencies introduced by package version changes in pull requests,
> and warns you about the associated security vulnerabilities.
> This gives you better visibility of what's changing in a pull request,
> and helps prevent vulnerabilities being added to your repository.
https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-04-19 20:04:54 -05:00
dependabot[bot]
9f9e0deafb
Bump docker/metadata-action from 3.6.2 to 3.7.0
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 3.6.2 to 3.7.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](e5622373a3...f2a13332ac
2022-04-06 15:44:28 +00:00
naveensrinivasan
5b352ec1d2
Set permissions for GitHub actions
...
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-04-05 01:37:14 +00:00
naveensrinivasan
48a2d3327d
Dependabot config settings for golang
...
- Dependabot config settings for golang
2022-03-18 21:17:43 +00:00
dependabot[bot]
c0475cc267
Bump actions/setup-go from 2.2.0 to 3
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 2.2.0 to 3.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](bfdd3570ce...f6164bd8c8
2022-03-18 21:12:05 +00:00
naveensrinivasan
d75d409800
Dependabot for GitHub actions
...
- Included dependabot config for GitHub actions.
2022-03-18 21:08:06 +00:00
naveensrinivasan
dd737bd755
Pin actions to a full length commit SHA
...
- Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
>Pin actions to a full length commit SHA
>Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload.
https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions
2022-03-18 20:47:20 +00:00
Chris Lu
5f3784ee05
Update binaries_dev.yml
2022-01-19 22:24:57 -08:00
Chris Lu
1dced26304
Update binaries_dev.yml
2022-01-19 22:21:17 -08:00
Chris Lu
e526a299dc
Update FUNDING.yml
2021-12-16 11:07:53 -08:00
Chris Lu
182fb9e3ed
Create FUNDING.yml
2021-12-16 11:02:32 -08:00
Chris Lu
da1c755f6a
fix build issue
...
fix https://github.com/wangyoucao577/go-release-action/issues/66
2021-11-23 07:39:43 -08:00
Chris Lu
791aa3cb44
update to wangyoucao577/go-release-action@v1.21
2021-11-15 08:33:46 -08:00
Chris Lu
320a08f250
adjust go release action version
2021-11-14 23:45:34 -08:00
Chris Lu
177129013c
releases in github actions disable http2client
2021-11-11 21:28:06 -08:00
Chris Lu
4d388b9782
Update binaries_dev.yml
2021-11-11 18:37:38 -08:00
Chris Lu
5eb905a5d1
Update binaries_dev.yml
2021-11-11 12:05:23 -08:00
Chris Lu
79a1903021
Update binaries_dev.yml
2021-11-11 11:53:47 -08:00
Chris Lu
b0b2a03ea7
Update binaries_dev.yml
2021-11-10 12:27:45 -08:00
Chris Lu
641ce36f6f
Update binaries_dev.yml
2021-11-10 09:58:54 -08:00
Chris Lu
12e6692dac
trying wangyoucao577/go-release-action@bugfix/upload-fail
...
following https://github.com/wangyoucao577/go-release-action/issues/63#issuecomment-962417798
2021-11-06 05:34:34 -07:00
Chris Lu
5296c397f4
build latest container
2021-10-24 18:45:51 -07:00
Chris Lu
0a7e532fb2
Update binaries_dev.yml
2021-10-15 00:04:18 -07:00
Chris Lu
94700d65ba
serialize building dev binaries
2021-10-14 16:08:30 -07:00
Chris Lu
84d2e1bdd0
fix container building, make it same as rocksdb image
2021-10-11 01:29:05 -07:00
Chris Lu
4800d0ce26
separate into multiple actions
2021-10-11 00:56:35 -07:00
Chris Lu
bde2fc65b0
separate into multiple jobs for better execution
2021-10-11 00:35:22 -07:00
Chris Lu
0c12a7d12a
github action build rocksdb image
2021-09-30 21:43:34 -07:00
Chris Lu
adfd79e243
skip arm platform
2021-09-29 10:52:53 -07:00
Chris Lu
eab7cf4bd3
restore dev binaries building
2021-09-19 00:41:45 -07:00
Chris Lu
a0a6aa36fa
adjust name
2021-09-07 02:34:49 -07:00
Chris Lu
85a2046411
move out latest container building
2021-09-07 02:12:07 -07:00
Chris Lu
9ca7c322b4
reduce resource usage
2021-09-07 01:44:52 -07:00
Chris Lu
2954bd71f8
testing different binary name
2021-09-06 23:44:08 -07:00
