Commit graph

147 commits

Author SHA1 Message Date
naveensrinivasan dd737bd755 Pin actions to a full length commit SHA
- Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

>Pin actions to a full length commit SHA

>Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload.

https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions
2022-03-18 20:47:20 +00:00
Chris Lu 5f3784ee05
Update binaries_dev.yml 2022-01-19 22:24:57 -08:00
Chris Lu 1dced26304
Update binaries_dev.yml 2022-01-19 22:21:17 -08:00
Chris Lu e526a299dc
Update FUNDING.yml 2021-12-16 11:07:53 -08:00
Chris Lu 182fb9e3ed
Create FUNDING.yml 2021-12-16 11:02:32 -08:00
Chris Lu da1c755f6a fix build issue
fix https://github.com/wangyoucao577/go-release-action/issues/66
2021-11-23 07:39:43 -08:00
Chris Lu 791aa3cb44 update to wangyoucao577/go-release-action@v1.21 2021-11-15 08:33:46 -08:00
Chris Lu 320a08f250 adjust go release action version 2021-11-14 23:45:34 -08:00
Chris Lu 177129013c releases in github actions disable http2client 2021-11-11 21:28:06 -08:00
Chris Lu 4d388b9782
Update binaries_dev.yml 2021-11-11 18:37:38 -08:00
Chris Lu 5eb905a5d1
Update binaries_dev.yml 2021-11-11 12:05:23 -08:00
Chris Lu 79a1903021
Update binaries_dev.yml 2021-11-11 11:53:47 -08:00
Chris Lu b0b2a03ea7
Update binaries_dev.yml 2021-11-10 12:27:45 -08:00
Chris Lu 641ce36f6f
Update binaries_dev.yml 2021-11-10 09:58:54 -08:00
Chris Lu 12e6692dac
trying wangyoucao577/go-release-action@bugfix/upload-fail
following https://github.com/wangyoucao577/go-release-action/issues/63#issuecomment-962417798
2021-11-06 05:34:34 -07:00
Chris Lu 5296c397f4 build latest container 2021-10-24 18:45:51 -07:00
Chris Lu 0a7e532fb2 Update binaries_dev.yml 2021-10-15 00:04:18 -07:00
Chris Lu 94700d65ba serialize building dev binaries 2021-10-14 16:08:30 -07:00
Chris Lu 84d2e1bdd0 fix container building, make it same as rocksdb image 2021-10-11 01:29:05 -07:00
Chris Lu 4800d0ce26 separate into multiple actions 2021-10-11 00:56:35 -07:00
Chris Lu bde2fc65b0 separate into multiple jobs for better execution 2021-10-11 00:35:22 -07:00
Chris Lu 0c12a7d12a github action build rocksdb image 2021-09-30 21:43:34 -07:00
Chris Lu adfd79e243 skip arm platform 2021-09-29 10:52:53 -07:00
Chris Lu eab7cf4bd3 restore dev binaries building 2021-09-19 00:41:45 -07:00
Chris Lu a0a6aa36fa adjust name 2021-09-07 02:34:49 -07:00
Chris Lu 85a2046411 move out latest container building 2021-09-07 02:12:07 -07:00
Chris Lu 9ca7c322b4 reduce resource usage 2021-09-07 01:44:52 -07:00
Chris Lu 2954bd71f8 testing different binary name 2021-09-06 23:44:08 -07:00
Chris Lu ce9e606eb2 fix waiting, binary name. 2021-09-06 23:11:59 -07:00
Chris Lu ee143f9ae0 github action adds dependencies 2021-09-06 22:54:29 -07:00
Chris Lu 5035b0a109 build binaries on release 2021-09-06 21:48:24 -07:00
Chris Lu a443e39def add back delays 2021-09-06 20:29:48 -07:00
Chris Lu 64971b0d7e merge into one action 2021-09-06 18:39:29 -07:00
Chris Lu 68b23114b9 adjust actions 2021-09-06 18:37:57 -07:00
Chris Lu 0c47437ece Revert "action: delete previous assets"
This reverts commit 9ec151fa0d.
2021-09-06 18:37:20 -07:00
Chris Lu 9ec151fa0d action: delete previous assets 2021-09-06 18:35:19 -07:00
Chris Lu d5c7dbac4a docker: build dev containers 2021-09-05 23:09:13 -07:00
Chris Lu d869a07cd2 clean up 2021-09-05 23:08:34 -07:00
Chris Lu 705285ec60 rename file 2021-09-05 17:02:50 -07:00
Chris Lu f2de7910fc move latest image build to after binary released 2021-09-05 17:02:22 -07:00
Chris Lu ae98a085d3 automated latest image build 2021-09-05 16:56:12 -07:00
Chris Lu cd838b1197
Merge pull request #2292 from logband/master
fix(ci): update latest to only run once
2021-08-28 20:33:16 -07:00
Alexander aeda4be42c fix(ci): use cleaner naming for jobs 2021-08-29 12:12:30 +09:00
Alexander 7cfaa1a365 fix(ci): further testing of CI logic 2021-08-29 12:06:10 +09:00
Alexander bfb66b88b1 fix(ci): do not run on mainline branch 2021-08-29 12:02:58 +09:00
Alexander 16f0cdc1bf fix(ci): never try to push on test pull request 2021-08-29 11:57:08 +09:00
Alexander b686e8c45b fix(ci): update latest to only run once 2021-08-29 11:54:49 +09:00
Alexander ab0ebe1d3b
Merge branch 'chrislusf:master' into master 2021-08-29 11:47:35 +09:00
Alexander 4128c1126a fix(ci): upload all arches to Docker Hub once 2021-08-29 11:47:19 +09:00
Chris Lu ff70ba51ac build with latest go version 2021-08-28 00:41:34 -07:00